APM: User session id and client ip sent to syslog server after login vpn.

Question

Hi Friends&nbsp;
We need to record user information(vpn session id &amp; client ip) at each access internal netwok resource after the success of login F5-VPN.&nbsp;
Our APM is network access mode,Internal network have many tcp and udp application.I want each request these resources will be triggered the F5 to send user information(vpn session id &amp; client ip) to the remote syslog server.How to do?&nbsp;
Thanks everyone&nbsp;

hari_126827 · Answer

Hi,&nbsp;
Please see if below links could help in checking log on APM and divert the traffic to syslog server.,&nbsp;
session log on APM: SOL11134: Locating a user's session ID&nbsp;
filter message on syslog: SOL13333: Filtering log messages sent to remote syslog servers (11.x - 12.x)&nbsp;
Off course, its also good idea to have irule for APM for getting APM log.local1, wherein we can use ACCESS::user for getting userID, and ACCESS::session for getting session ID and IP address..&nbsp;
KRgds,
Hari&nbsp;

Forum Discussion

APM: User session id and client ip sent to syslog server after login vpn.

1 Reply

Recent Discussions

ASM instance creation

[ASM] - what is "Browser Challange file" ?

[ASM] - HTML5 Cross-Domain Request Enforcement - CLI command

Reverse Proxy Not Behaving

Stable Firmware for F5

Related Content

BIG-IP to Process TLS Syslog Traffic

Enhance your Application Security using Client-side signals

iRule to set SameSite for compatible clients and remove it for incompatible clients (LTM|ASM|APM)

Removal Cookies on Client Browser

F5 Sending syslogs with two hostname to remote syslog server