Forum Discussion

Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
Sep 16, 2015

How to include POST parameters if using remote logging option in ASM

Hello,

 

If ASM local logging is enabled, there are no constraints to investigating the values of POST parameters of incoming requests (Application Secuirity -> Event Logs).

 

Question: Are there any good solutions within the ASM module for logging the values of POST parameters when using the remote logging option instead of local logging?

 

My best workaround idea so far is going with an iRule solution which collects the HTTP payload of a request (POST parameters) and sends the extracts to a remote syslog server using HSL. I'd rather avoid taking this route if possible. Are there better alternatives that I'm missing here?

 

ASM Advanced WAF
security

1 Reply

Sort By
  • BinaryCanary_19's avatar
    BinaryCanary_19
    Historic F5 Account
    Mar 20, 2016

    When you create a remote logging profile (Security > Event Logs > Logging Profiles) are you not able to select "request" as part of the fields to send to your remote log server? Doesn't this field give you the information you need?