Technical Forum
Ask questions. Discover Answers.
cancel
Showing results for 
Search instead for 
Did you mean: 

Unknown event send to siem

THE_BLUE
Cirrus
Cirrus

WAF send multiple logs combaimed togater  to siem tool as unknown, how to solve this issue ? is there way to send the logs with clear name?

2 REPLIES 2

Brown2121
Nimbostratus
Nimbostratus

hen a device is not officially supported, you have the following options:
Open a request for enhancement (RFE) to have your device officially supported.
Go to the QRadar SIEM RFE page (https://ibm.biz/BdRPx5).
Log in to the support portal page.
Click the Submit tab and type the necessary information.

 

PaybyPlateMa

THE_BLUE
Cirrus
Cirrus

f5 device is supported by qradar tools , the issue is if in one request there are more than 1 violation  the event name display as unknown , but if i press the event i can see all violation  list realted to the request  . is there away to make waf send the request one by one ? or to display all violation in event name