Last Modified: Feb 14, 2024
Affected Product(s):
BIG-IQ AppIQ
Known Affected Versions:
7.1.0, 7.1.0.1, 7.1.0.2, 7.1.0.3, 7.1.6, 7.1.6.1, 7.1.7, 7.1.7.1, 7.1.7.2, 7.1.8, 7.1.8.1, 7.1.8.2, 7.1.8.3, 7.1.8.4, 7.1.8.5, 7.1.9, 7.1.9.7, 7.1.9.8, 7.1.9.9, 8.0.0, 8.0.0.1
Opened: May 06, 2021 Severity: 3-Major
Collected-stats-internal-logging becomes disabled when a managed BIG-IP is removed from BIG-IQ.
Collected-stats-internal-logging is disabled for BIG-IP AFM.
1. Check what is the default setting on the BIG-IP AFM, and if the collected-stats-internal-logging is enabled. 2. Add BIG-IP to BIG-IQ, discover LTM and AFM services. After adding AFM device into BIG-IQ's managed devices, check if the setting still appears to be as follows: [root@bigip1:Active:Standalone] config # tmsh list security analytics settings collected-stats-internal-logging security analytics settings { collected-stats-internal-logging enabled } 3.Remove services from BIG-IP in BIG-IQ, then remove BIG-IP from BIG-IQ. 4. Check security analytics settings 'collected-stats-internal-logging' and 'collect-all-dos-statistic'.
None
None