Bug ID 726389: Syslogs with 'request' attribute larger than 32766 characters do not appear on BIG-IQ Monitoring

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IQ Web App Security (ASM)(all modules)

Fixed In:
6.0.1

Opened: Jul 02, 2018

Severity: 3-Major

Symptoms

Syslogs are not saved onto BIG-IQ when the 'request' attribute exceeds an allowed character length. A syslogs save fails with the following error in the logs: Document contains at least one immense term in field="request" (whose UTF8 encoding is longer than the max length 32766).

Impact

Syslogs are not saved onto BIG-IQ.

Conditions

Syslogs with 'request' attribute larger than 32766 characters.

Workaround

None

Fix Information

Syslogs are now saved onto BIG-IQ when max allowed characters for the 'request' attribute is reached (max length 63461).

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips