topic ASM Log Source Type not showing up after Splunk for F5 install. in Installation

ASM Log Source Type not showing up after Splunk for F5 install.

rhuss — Wed, 14 Jul 2010 01:34:13 GMT

I have installed Splunk for F5 and the ASM Log Source type is not listed as an available source type for my logs.

I am running Splunk 4.1.3 Build 80534 for Windows.

Can someone tell me how to setup my data input as ASM Logs Source type?

Thanks.

michael_sanchez — Mon, 28 Sep 2020 14:23:40 GMT

Hi,

The sourcetype of your data must be asm_log. You have to define sourcetype=asm_log in the inputs.conf file.

Exemple if you collect the logs through syslog :

[tcp://syslog.corp.company.net:514]
sourcetype = asm_log