Forum Discussion

Marvin_129795's avatar
Marvin_129795
Icon for Nimbostratus rankNimbostratus
Aug 27, 2015

Syslog Arcsight and remote destination Syslog combined

Hi All,   I have a Big IP LTM + ASM installed. Within the ASM I have a logging profile configured that sends the ASM logs in CEF format to Arcsight that works perfect.   I also have a standard ...
arcsight
ASM Advanced WAF
security
syslog
syslog-ng
Marvin's avatar
Marvin
Icon for Cirrocumulus rankCirrocumulus
Aug 31, 2015

Hi Amit,

 

You are totally right. I was using tcpdump with the option -i 0.0 but that didn’t capture the management packets. So when I started to capture specifically the management interface I did see the traffic.

 

Case closed.

 

Thanks