Forum Discussion

raghav_rao_2526's avatar
raghav_rao_2526
Icon for Nimbostratus rankNimbostratus
Jun 28, 2016

Admin and user activity logging?

Hi Folks!   I am aware of logging feature of ASM where all the application events are logged, is there any option to configure Admin and User activity logging in F5 (ASM)? If yes, how do we config...
ASM Advanced WAF
security
Erik_Novak's avatar
Erik_Novak
Icon for Employee rankEmployee
Jun 28, 2016

Hi Raghav, ASM logs system and administrative events in /var/log/asm and syslog. To send logging data to Arcsight, you need to create a logging profile and select Arcsight (Common Event Format) as the logging format. Go to Security > Event Logs > Logging Profiles, enable Application Security, enable Remote Storage, and then select your destination server.