Forum Discussion

helyousa_337216's avatar
helyousa_337216
Icon for Nimbostratus rankNimbostratus
Mar 11, 2019

ASM Event Logging to an FQDN

Hello Guys,

 

I had to configure an ASM event logging profile to send logs of ASM to an ELK cluster in AWS. This cluster has a dynamic virtual IP changing every X minutes with a static FQDN.

 

Problem i cannot set a FQDN in the remote logging server in ASM Event profile. I thought to create a virtual server with this ELK cluster and set the IP of my virtual server in the the remote logging server field. But this will cause the traffic to get twice by the BIGIP.

 

Do you have any ideas ?

 

Thank you

 

ASM Advanced WAF
AWS
cloud
security

1 Reply

Sort By
  • Rico's avatar
    Rico
    Icon for Cirrus rankCirrus
    Mar 11, 2019

    You should be able to configure high speed logging (HSL) with ASM with this guide. When you create the pool of logging servers to send the logs to, you can add a pool member based on a FQDN. This will query the FQDN and return the appropriate IP address.