This is the multi-page printable view of this section. Click here to print.

Return to the regular view of this page.

F5 BIG-IP LTM

    Samurai [Local] CollectorSamurai [Cloud] Collector
    Picture1.svg

    Ensure correct network connectivity

    You must ensure the following connectivity requirements are fulfilled:

    SourceDestinationPortsDescription
    BIG-IP LTMSamurai Local CollectorTCP/514For log transmission

    Follow steps in F5 documentation

    Perform the steps outlined in the vendor documentation to configure and implement a Request Logging profile:

    Perform the below settings adjustments under the relevant section. In case a setting property is not referenced below, simply use the default value.

    Creating a pool with request logging to manage HTTP traffic

    • IP address of logging server: Insert the IP address of the Samurai Local Collector.
    • Service Port: 514

    Creating a request logging profile

    • HSL Protocol: TCP
    • Custom Request Settings: BIGIP_LTM_WEB $BIGIP_HOSTNAME $VIRTUAL_NAME $NCSA_COMBINED

    For integrations that utilize a Local Collector where we ingest syslog only, you do not need to follow specific steps in the Samurai MDR portal as we auto detect the vendor and product. The only reason you need to use the Samurai MDR portal is if you need to determine the Local Collector IP address. Of course you will still need to ensure the integration is functioning! See Integrations for more information on checking status.

    Our Integration guide was accurate at the time of writing but vendors change things frequently! If you find errors or anything is outdated, let us know by raising a request in the Samurai MDR application and we shall get it updated.