Forum Discussion

Mario_Kranjec_3's avatar
Mario_Kranjec_3
Icon for Nimbostratus rankNimbostratus
Mar 28, 2019

ASM Logs going to wrong facility

Hello,

 

I have F5 v14.1 and newest version of ASM and I'm trying to tell to my ASM remote logging profile to which facility to send logs to. Problem is that I use Splunk as log collector and in my ASM Remote Log Profile I use "Key-Value Pairs (Splunk)" which is all fine but with that format I can't choose Logging Facility and by default it uses local0 facility which I want to change.

 

If I change Logging format to Comma Seperated Values then I can change facility but I don't like that output (format) and Splunk doesn't parse it well either.

 

So my question is: Is there a way to use "Key-Value Pairs (Splunk)" Logging format in ASM Logging profile and tell it to use let's say local3 facility instead local0? Over GUI I simply don't have "Facility" drop-down option or I'm missing something.