Bug ID 2162873: Pipe and backslash characters are not escaped in ArcSight CEF remote logging

Last Modified: Sep 02, 2026

Affected Product(s):
BIG-IP ASM(all modules)

Fixed In:
17.5.1.9, 17.1.3.5

Opened: Nov 27, 2025

Severity: 4-Minor

Symptoms

Pipe and backslash characters are not escaped in ArcSight CEF remote logging.

Impact

Logging records may not be correctly read by ArcSight or other log collector.

Conditions

A logging profile is configured with ArcSight CEF remote logging format. A log field contains a pipe in the CEF header (such as an Attack Signature name), or a backslash in any log field.

Workaround

None

Fix Information

Pipe and backslash characters are correctly escaped in ArcSight CEF remote logging.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips