Forum Discussion

Maciej_Waliszko's avatar
Maciej_Waliszko
Icon for Nimbostratus rankNimbostratus
Mar 23, 2017

AFM + custom logging profile with some chosen fields for storage format

Hello, I have AFM running on 12.1. I created my own logging profile and I assigned it to a VIP. The same VIP also has firewall policy assigned (for now it is staged). While creating that logging profile I chose some of the fields for storage formats. Despite that from what I can see in the logs all the fields are logged and not the ones I decided to choose. Why? Where did I make my mistake?

 

AFM
security

4 Replies

Sort By
  • Tikka_Nagi_1315's avatar
    Tikka_Nagi_1315
    Historic F5 Account
    May 12, 2017

    Without looking at the configuration and logs it is difficult to determine what is wrong. I would recommend that you open a support case and provide a qkview to troubleshoot this.

     

  • kkohegyi_165129's avatar
    kkohegyi_165129
    Icon for Nimbostratus rankNimbostratus
    Dec 28, 2017

    Hi Maciej,

     

    I am encountering the same problem.

     

    Did you solve this issue ?

     

    thx,

     

    • Richard_Karon's avatar
      Richard_Karon
      Icon for Employee rankEmployee
      Jul 02, 2018

      what do the following commands show:

       

      tmsh list /ltm virtual tmsh list /security log profile

       

  • Seattle2k's avatar
    Seattle2k
    Icon for Employee rankEmployee
    Mar 22, 2019

    If you want to use a custom field-list, in your AFM Logging Profile, make sure that your Log Publisher does not point to Splunk (formatted) Log Destination. The Splunk-formatted destination will override the AFM Logging Profile, effectively ignoring the custom field-list or user-defined list.