Logging

DNS profile - enable logging

logging profile - set publisher

publisher - set desitnation * syslog format

* set destination syslog format to pool destination

destination - set pool

use an irule

when HTTP_REQUEST {
log local0. "Client [IP::client_addr] request to [HTTP::host]"
}

http or https connection logs will be logged in /var/log/ltm

big-ip-ltm info tmm[12062]: Rule /Common/iRule-log <HTTP_REQUEST>: Client 10.10.10.10 request to www.example.com

To summarise the steps needed to configure and Implement a Request Logging profile, refer to the below:

Configure your virtual server and pool for handling application traffic, with a HTTP profile
Create another pool, containing your log server
Create the Request Logging profile by defining

Request/Response logging Enabled/Disabled
Template
Protocol
HSL Pool
Everything else is optional

Assign the Request Logging profile to your virtual server

Pass HTTP traffic, the logs should be sent to the log pool

ref;https://support.f5.com/csp/article/K00847516

remote audit logs - https://support.f5.com/csp/article/K56602501

??????

ref; https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-external-monitoring-implementations-12-0-0/4.html