Forum Discussion

The_Engima_Code's avatar
The_Engima_Code
Icon for Nimbostratus rankNimbostratus
May 18, 2015

F5 ASM and SIEM

Hi,   I am trying to integrate McAfee SIEM with F5 ASM and it seems the SIEM wouldn't parse the logs correctly. I have raised a ticket with McAfee and they confirmed that the SIEM is working fin...
ASM Advanced WAF
mcafee siem and asm
security
Jinshu's avatar
Jinshu
Icon for Cirrus rankCirrus
Mar 08, 2018

Hi,

 

You can select 'Remote Storage Type' in the logging profile and change the delimited value to |.

 

  • Navigate to Security ›› Event Logs : Logging Profiles ›› Edit Logging Profile
  • You can see Remote Storage Type. Select 'Remote' from drop down.
  • In the Facility field, type the delimter | instead ,
  • Select the appropriate Storage Format from the available list.
  • Update the config.

Hope this helps.

 

-Jinshu