My customer has a F5 ASM & LTM v 11.2 box, which has a GUI to edit the sequence of fields in the log and choose what kind of fields to be included in the log.
We tried to apply the F5 ASM parser to the data source but all we can see are unknown events. This is the same when we applied LTM parser.
So we believe the F5 ASM & LTM parser is built based on a log format that follows a certain sequence.
Does anyone have any information for the log format that is required for F5 ASM & LTM parser to parse the logs correctly?
Same issue here.