Syslog - F5 BIG-IP ASM CEF

Device Details

Device Name	F5 BIG-IP ASM CEF
Vendor	F5
Device Type	BIG-IP ASM
Supported Model Name/Number	N/A
Supported Software Version	N/A
Collection Method	Syslog
Configurable Log Output	CEF
Log Source Type	Syslog - F5 BIG-IP ASM CEF
Log Processing Policy	LogRhythm Default V 2.0
Exceptions	N/A
Additional Information	https://techdocs.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-12-1-0/14.html https://my.f5.com/manage/s/article/K37655278 https://my.f5.com/manage/s/article/K9435

(List of LR tags used to parse the log information for each message type)

Type	Product Version	Supported Schema Fields
ASM Violations Events	N/A	<vmid>, <vendorinfo>, <tag1>, <severity>, <sname>, <policy>, <group>, <action>, <responsecode>, <sip>, <sport>, <dip>, <dport>, <command>, <protname>, <threatname>, <subject>, <threatid>
Catch All : Level 1	N/A	<tag1>, <severity>

KB Version	Log Type	Change Type	Details
KB 7.1.698.0	Syslog - F5 BIG-IP ASM CEF	New Device Documentation	N/A