You can configure syslog for F5 BIG-IP APM 10.x
About this task
To configure a remote syslog for F5 BIG-IP APM 10.x take the following steps:
Procedure
-
Log in to the command-line of your F5 BIG-IP device.
-
Type the following command to add a single remote syslog server:
bigpipe syslog remote server {<Name> {host <IP
address>}}
Where:
- <Name> is the name of the F5 BIG-IP APM syslog source.
- <IP address> is the IP address of QRadar
Console.
For example,
bigpipe syslog remote server {BIGIP_APM {host 192.0.2.1}}
-
Type the following to save the configuration changes:
bigpipe save
The configuration is complete. The log source is added to IBM
QRadar as F5 Networks BIG-IP APM
events are automatically discovered. Events that are forwarded to QRadar by F5 Networks BIG-IP APM
are displayed on the Log Activity tab.