Security event logs forwarding

[inshaaf82]

Hi, I have a requirment to forward all "security event logs" from BIG-IP WAFin to a syslog server. Can anyone help me to get this done.

[Mohamed_Ahmed_Kansoh · Accepted solution]

Hi @inshaaf82 , 

You need to configure a remote logging profile for ASM event logs. 

Please see the below Article , starting from setting remote logging section : 

https://techdocs.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-12-1-0/14.h...

> you will build your profile from scratch. 

Follow it step by step. 

> please make sure with the reachability between F5 and syslog server , and configure your syslog to collect logs from f5. 

Do it and keep me updated,  to know if you have any further concerns. 

[Leslie_Hubertus]

Hi @inshaaf82 - I see you gave Mohamed's response a kudo, so I'm going to mark it as an Accepted Solution in order to make it easier for future users to find. If it didn't solve your issue after all, please let me know so I can unmark it. 🙂