Configure F5 ASM to send CEF messages¶
Follow the instructions in F5 Configuring Application Security Event Logging to set up remote logging, using the following guidelines:
- Set the Remote storage type to CEF.
- Set the Protocol to TCP.
- Set the IP address to the LogSentinel Collector's IP address.
- Set the port number to 2514, or the port you have configured in the LogSentinel Collector
Make sure that all firewalls (including the firewall on the collector machine) allow connections to the collector port