WAF send multiple logs combaimed togater to siem tool as unknown, how to solve this issue ? is there way to send the logs with clear name?
hen a device is not officially supported, you have the following options:
Open a request for enhancement (RFE) to have your device officially supported.
Go to the QRadar SIEM RFE page (https://ibm.biz/BdRPx5).
Log in to the support portal page.
Click the Submit tab and type the necessary information.
f5 device is supported by qradar tools , the issue is if in one request there are more than 1 violation the event name display as unknown , but if i press the event i can see all violation list realted to the request . is there away to make waf send the request one by one ? or to display all violation in event name