F5 Networks Big IP Application Security Manager 11.2 Configuration Guide - CEF Certified
Where can the content pack mentioned in the document be found?
It isn't available.
Page 23 on the guide says it was developed as a proof of concept to demonstrate possible functionality with the ArcSight-F5 integration. The content is not supported by HP ArcSight and is not delivered as part of any officially released product.
The content pack is available in the F5 Networks folder here:
The specified item was not found.
It was developed on ESM 220.127.116.1121 and according comments on the page, does not appear to be compatible with ESM 4.5. I will look in to it a bit and also update the guide with the ESM version info.
The request fields are not populated with the information that is now in in event.CustomString3?
Furthermore I have a user agent that is getting chopped off, probably because it doesnt all fit into that string field (CS3). Please change the parser to properly populate available fields in stead of putting everything into custom strings. Im getting tired of cutting and clueing fields with variables/map files all the time...
Thanks for the feedback. I will discuss with F5 and see about getting that addressed.
F5 officially get informed on the problem.
Retrieving data ...