NimbostratusI am pretty knew to the F5 BIG-IP world. I am looking to create an iRule that will send syslog messages to my SIEM. According to my SIEM vendor I need these events in the NIDS format. I am currently using BIG-IP 11.3 LTM
Any help would be appreciated. Thanks.
EmployeeYou don't need an iRule to perform remote syslog and if you want to perform high-speed logging (HSL) of requests then use a request logging profile.
What HSL within iRules gives you is specific formats and contents of logs.
NimbostratusThanks for this. I forgot to mention this in my original post, but will this automatically be sent in NEDS format? I don't see that in the documentation.
Thanks.