We had a BIG-IP System running WAF. At this time all event WAF log was sending to BIG-IQ.
So. Do you know solution sent WAF event from BIG-IQ to Remote Sever ( SOC=arcsight)
Note. One time BIG-IP only use a manual Log profile.
you can send to both together.
See if works, for me works in QRadar