Forum Discussion

Rozh's avatar
Rozh
Icon for Nimbostratus rankNimbostratus
Jun 20, 2020

Separate Event Logs

Dear all,Hello I have a lot of logs F5 products in SIEM, Know I want to specify the logs of the Network Login Failed & Change Configuration,.... In general, I want to separate the Audit logs from ...
BIG-IP
F5 Rules for AWS WAF
security
Ivan_Chernenkii's avatar
Ivan_Chernenkii
Icon for Employee rankEmployee

Hello Rozh,

 

For event logs you can configure remote logging profile on "Security ›› Event Logs : Logging Profiles" page with appropriate filter. e.g. "Login Result" only "failed"

 

Thanks, Ivan

Rozh's avatar
Rozh
Icon for Nimbostratus rankNimbostratus
Jul 31, 2020

Dear Chernenkii ,Thaks you .🙏

  • Ivan_Chernenkii's avatar
    Ivan_Chernenkii
    Icon for Employee rankEmployee
    Jul 31, 2020

    If this resolves your issue, then please mark this question as resolved.