Bug ID 622913: Audit Log filled with constant change messages

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2

Fixed In:
13.0.0, 12.1.2 HF1

Opened: Oct 16, 2016

Severity: 3-Major

Symptoms

Frequent changes by Policy Builder fill the audit log too quickly and can affect viewing the Security Logs: Error 502 Bad Gateway when clicking "Application Security" logs

Impact

Disk space usage and errors viewing the Application Security logs

Conditions

Frequent Policy Builder changes occur and no ASM device group is configured.

Workaround

Workarounds: 1) Turn off "Recommend Sync when Policy is not applied". (Security ›› Options : Application Security : Preferences) 2) Enable ASM sync on a device group.

Fix Information

Updates to the audit log are throttled at max 1/minute.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips