Syslog Filter- Audit Messages

Question

I'm looking for syslog filters where only audit logs can be sent to remote syslog server. Been through the couple of reference links but that really help. 
Can you someone please provide your thoughts.&nbsp;

iheartf5_45022 · Answer

What TMOS version you running?&nbsp;

ar_297682 · Answer

Running 11.5.3&nbsp;

leonardo_souza · Answer

You need to understand first what you want to send (or not to send), then work out the filter for that.&nbsp;
Here is a start point:&nbsp;
https://support.f5.com/csp/article/K13333&nbsp;
You may want to go to the main documentation about syslog-ng:&nbsp;
https://www.balabit.com/documents/syslog-ng-pe-latest-guides/en/syslog-ng-pe-guide-admin/html/filters.html&nbsp;

Forum Discussion

Syslog Filter- Audit Messages

3 Replies

Recent Discussions

Chrome V 124+ on MacOS - Virtual Server Access Issue

F5Access | MacOS Sonoma

Transaction looks successful but file not downloading

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

F5 Access Guard Deprecated: ZTA APM

Related Content

A Simple One-way Generic MRF Implementation to load balance syslog message

FIX Message Response

Configuring syslog-ng to email messages

Tcp syslog

Modern APM Message Box