Technical Forum
Ask questions. Discover Answers.
cancel
Showing results for 
Search instead for 
Did you mean: 
Custom Alert Banner

Security event logs forwarding

inshaaf82
Nimbostratus
Nimbostratus

Hi, I have a requirment to forward all "security event logs" from BIG-IP WAFin to a syslog server. Can anyone help me to get this done.

1 ACCEPTED SOLUTION

Hi @inshaaf82 , 

You need to configure a remote logging profile for ASM event logs. 

Please see the below Article , starting from setting remote logging section : 

https://techdocs.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-12-1-0/14.h...

> you will build your profile from scratch. 

Follow it step by step. 

> please make sure with the reachability between F5 and syslog server , and configure your syslog to collect logs from f5. 

Do it and keep me updated,  to know if you have any further concerns. 

_______________________
Regards
Mohamed Kansoh

View solution in original post

2 REPLIES 2

Hi @inshaaf82 , 

You need to configure a remote logging profile for ASM event logs. 

Please see the below Article , starting from setting remote logging section : 

https://techdocs.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-12-1-0/14.h...

> you will build your profile from scratch. 

Follow it step by step. 

> please make sure with the reachability between F5 and syslog server , and configure your syslog to collect logs from f5. 

Do it and keep me updated,  to know if you have any further concerns. 

_______________________
Regards
Mohamed Kansoh

Leslie_Hubertus
Community Manager
Community Manager

Hi @inshaaf82 - I see you gave Mohamed's response a kudo, so I'm going to mark it as an Accepted Solution in order to make it easier for future users to find. If it didn't solve your issue after all, please let me know so I can unmark it. 🙂