Unknown event send to siem

Question

WAF send multiple logs combaimed togater&nbsp; to siem tool as unknown, how to solve this issue ? is there way to send the logs with clear name?

the_blue · Answer

f5 device is supported by qradar tools , the issue is if in one request there are more than 1&nbsp;violation&nbsp; the event name display as unknown , but if i press the event i can see all violation&nbsp; list realted to the request&nbsp; . is there away to make waf send the request one by one ? or to display all violation in event name

Forum Discussion

Unknown event send to siem

1 Reply

Recent Discussions

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

Pricing when used with aws waf

F5 terminal - help to run commands - disk space full

import live updates from version x to version y

Tenant image upgrade

Related Content

Security Automation with F5 BIG-IP and Event Driven Ansible

Leveraging Ansible Rulebooks for Streamlined Event Triggers: Advantages and Benefits

Log separation by event

Mitigating the Unknown

asmevents tool to retrieve events from an ASM device