Forum Discussion

spud_141786's avatar
spud_141786
Icon for Nimbostratus rankNimbostratus
Jul 21, 2016

how to get additional geolocation data into ASM event logs?

The application security logging profile has a single field titled "geo_location" that logs geolocation by country code. Is there any way to get additional geolocation data into the ASM event logs? (i.e. City, Organization, ISP)?

 

Jul 21 11:53:46 f5bigip ASM: "","2016-07-21 11:53:46","192.168.105.42","443","DE","5.xx.xx.103","/doku/doku.php",""015
Jul 21 12:01:40 f5bigip ASM: "","2016-07-21 12:01:39","192.168.105.42","443","NL","188.xx.xx.158","/doku/doku.php",""015
Jul 21 12:08:45 f5bigip ASM: "","2016-07-21 12:08:45","192.168.105.42","443","GB","46.xx.xx.32","/doku/doku.php",""015
Jul 21 12:15:52 f5bigip ASM: "","2016-07-21 12:15:52","192.168.105.42","443","US","107.xx.xx.23","/doku/doku.php",""015

 

application delivery
ASM Advanced WAF
security

2 Replies

Sort By
  • Vijith_182946's avatar
    Vijith_182946
    Icon for Cirrostratus rankCirrostratus
    Jul 23, 2016

    I think the geo_location field should show the country and city information: https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-external-monitoring-implementations-11-5-0/12.html?sr=55923923

     

    If its not visible i think you may need to update the geolocation database: https://support.f5.com/kb/en-us/solutions/public/11000/100/sol11176.html

     

    this link might also help : https://support.f5.com/kb/en-us/solutions/public/15000/000/sol15042.html

     

    • wanghuiqi_30716's avatar
      wanghuiqi_30716
      Icon for Nimbostratus rankNimbostratus
      May 24, 2017

      I have encountered this problem too, and I have upgraded GEOIPDB to the latest version. I think geo_location field should not output the city information. I don't know why. Did this problem solved, @spud, @Vijith