Forum Discussion

Utkc137's avatar
Utkc137
Icon for Nimbostratus rankNimbostratus
Dec 20, 2023

Big IP Security Logging Profiles logs captured

Does Logging Profile created for Application Security also capture Application Audit Logs?  I am trying to capture audit changes made on Big IP Console. For example, creating a new allowed HTTP URL...
Audit Logging
devops
security
Daniel_Wolf's avatar
Daniel_Wolf
Icon for MVP rankMVP
Dec 20, 2023

Hi Utkc137,

you can find them in /var/log/asm. They should look similar to this:

Dec 20 11:16:00 awaf17.mydomain.com info perl[13577]: 01310053:6: ASMConfig change: Blocking Policy Setting Modified domain cookie(s) [update]: Enable Learn. Enable Alarm. Enable Block. { audit: policy = /Common/juiceshop, username = admin, client IP = 192.168.100.1 }

Is this what you were looking for?

KR
Daniel