Configuring Remote Syslog for F5 BIG-IP LTM V9.4.2 to V9.4.8

You can configure syslog for F5 BIG-IP LTM V9.4.2 to V9.4.8.

About this task

To configure syslog for F5 BIG-IP LTM V9.4.2 to V9.4.8 take the following steps:

Procedure

  1. Log in to the command-line of your F5 BIG-IP device.
  2. Type the following command to add a single remote syslog server:

    bigpipe syslog remote server <IP address>

    Where: <IP address> is the IP address of IBM® QRadar®.

    For example:

    bigpipe syslog remote server 192.0.2.1

  3. Type the following to save the configuration changes:

    bigpipe save

    The configuration is complete. Events that are forwarded from your F5 Networks BIG-IP LTM appliance are displayed on the Log Activity tab in QRadar.