F5 BIGIP Data

The Splunk Add-on for F5 BIG-IP addon is required to collect the F5 BIGIP ASM logs.

Splunkbase Download: https://splunkbase.splunk.com/app/2680/

Installation Guide: https://splunkbase.splunk.com/app/2680/#/details

How to Install and Configure the F5 BIGIP Addon:

1. Install the Add-on on the Heavy Forwarder.

2. Configure the Add-on on the Heavy Forwarder.
   • Getting data into Splunk Reference.
   • Create an index named f5 or update the macro definition in Cyences’ configuration page.
3. Install the Add-on on the Search Head.

Estimated Data Size