F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Hoang_Hung's avatar
Hoang_Hung
Icon for Cirrus rankCirrus
Aug 24, 2020

WAF Event Log on BIG-IQ not Real - Time

Hi all We have BIG-IQ system. But At this time WAF event log on BIG-IQ not real -time We have check event log on BIG-IP Device all ok. But on BIG-IQ not real -time Plz help me BIG-IQ: Time: Last ...
ASM Advanced WAF
BIG-IQ
security
Ivan_Chernenkii's avatar
Ivan_Chernenkii
Icon for Employee rankEmployee
Aug 27, 2020

Hello Hung,

 

It looks like your BIG-IP and BIG-IQ are out of sync - you have VS with policy and logging profile on BIG-IP, but not on BIG-IQ, that is why on BIG-IQ you don't see any logs anymore.

I suggest to create needed configuration on BIG-IQ and then deploy it to all appropriate BIG-IPs.

About inactive policy - you need to make it active.. Do you know how?

 

Thanks, Ivan

Ivan_Chernenkii's avatar
Ivan_Chernenkii
Icon for Employee rankEmployee
Aug 31, 2020

So, AFAIU, currently you see requests logged on BIG-IP, but not on BIG-IQ. Right?

OR you see, that the same request (with the same support ID) is logged on BIG-IP and BIG-IQ, but with different time?

 

If request is logged on BIG-IP only, then most probably you don't have BIG-IQ remote logging profile attached to VS.

If you have such remote log profile, then please provide its configuration on BIG-IP and configuration of VS on BIG-IP.

 

Thanks, Ivan