Scott Estes (Customer) asked a question.
Are the WAF logs segregated by virtual service? Can they be? Also - I assume the logs with .1 .2 .3 in the names are from the same day, just a continuation due to meeting a size limit?
- Andrew Spagnuolo (Progress Software)
Hi,
The WAF logs are not segregated by virtual service by default, they are forwarded to the shared log stream which you'll find within the WAF event log file.
The best way to filter these would be through setting up an external syslog/ SIEM and for example using that to filter based on identifiers like Virtual Service IP, hostnames/urls.
Correct, the .1, .2, .3 etc indicate log rotation occurring triggered by file size limits being reached.
Best Regards,
Hi,
The WAF logs are not segregated by virtual service by default, they are forwarded to the shared log stream which you'll find within the WAF event log file.
The best way to filter these would be through setting up an external syslog/ SIEM and for example using that to filter based on identifiers like Virtual Service IP, hostnames/urls.
https://docs.progress.com/bundle/loadmaster-feature-description-web-application-firewall-ga/page/Export-WAF-Logs.html
Correct, the .1, .2, .3 etc indicate log rotation occurring triggered by file size limits being reached.
Best Regards,