How do I find out the number of occurences of an attack signature

Dear Wasfi,

 

When you navigate to Application Security >> Policy Building >> Manual Traffic Learning >> and open Attack Signature detected..

 

You will see the list of attack signature detected for that policy.

 

You will find number of Recent Incidents and Incidents.

 

Recent Incidents ( Displays the number of requests that matches the signature for which the system still has statistical details. Click on the occurrence number to open a popup window displaying the URL and IP address that send the violating request)

 

Incidents (Display the total number of requests that matches the signature , including requests for which the system no longer has the statistical details. due to system memory constraints)

 

Reference : From F5 Help Page..

 

Regards,

 

Mohammed Shiraz