Forum Discussion

MikeH's avatar
MikeH
Icon for Nimbostratus rankNimbostratus
Jul 09, 2019

Exporting APM session information

How can I export APM Session information details out to a syslog or SIEM server?

 

1 Reply

  • Hi Mike,

    You can export these data by using HSL protocol and with an iRule.

    For example to send the username of the user who completed the access policy, the iRule will be:

    when ACCESS_POLICY_COMPLETED {
        set username [ACCESS::session data get session.logon.last.username]
        set hsl [HSL::open -proto TCP -pool Pool_SPLUNK]
        HSL::send $hsl $username
    }

    More examples are available here:

    https://support.f5.com/csp/article/K53013601