Bug ID 1696757: IPS CEF logging misses some values

Last Modified: Jan 17, 2025

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1

Opened: Oct 15, 2024

Severity: 4-Minor

Symptoms

When configuring CEF logging the fields device vendor, device product and device version are not shown. So at the beginning of the log entry it reads: CEF:0||||27590657|test| Instead of: CEF:0|F5|Advanced Firewall Module|17.1.1.3.0.0.5|27590657|test|

Impact

Constant values from the AFM device, vendor, product and version, are missing in the IPS log.

Conditions

CEF logging configured for IPS.

Workaround

None.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips