F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Hoang_Hung's avatar
Hoang_Hung
Icon for Cirrus rankCirrus
Aug 24, 2020

WAF Event Log on BIG-IQ not Real - Time

Hi all We have BIG-IQ system. But At this time WAF event log on BIG-IQ not real -time We have check event log on BIG-IP Device all ok. But on BIG-IQ not real -time Plz help me BIG-IQ: Time: Last ...
ASM Advanced WAF
BIG-IQ
security
Ivan_Chernenkii's avatar
Ivan_Chernenkii
Icon for Employee rankEmployee
Aug 27, 2020

Hello Hung,

 

It looks like your BIG-IP and BIG-IQ are out of sync - you have VS with policy and logging profile on BIG-IP, but not on BIG-IQ, that is why on BIG-IQ you don't see any logs anymore.

I suggest to create needed configuration on BIG-IQ and then deploy it to all appropriate BIG-IPs.

About inactive policy - you need to make it active.. Do you know how?

 

Thanks, Ivan

Ivan_Chernenkii's avatar
Ivan_Chernenkii
Icon for Employee rankEmployee
Aug 27, 2020

Hoang,

 

You have BIG-IP (may be several) and BIG-IQ, so it looks like pretty complex configuration and issue can appear in different places, that is why it is not quite easy to understand what was happened, why and how to resolve it.

To activate policy try to deploy it first and then attach to VS.

 

Thanks, Ivan