Operational Defect Database

BugZero found this defect 195 days ago.

F5 | 1393761

ArcSight sends a series of '000000000' values in the remote log in case of Attack Signature Detected.

Last update date:

5/15/2024

Affected products:

BIG-IP

BIG-IP ASM

Affected releases:

17.1.0

17.1.0.1

17.1.0.2

17.1.0.3

17.1.1

17.1.1.1

17.1.1.2

17.1.1.3

Fixed releases:

No fixed releases provided.

Description:

Bug ID 1393761: ArcSight sends a series of '000000000' values in the remote log in case of Attack Signature Detected. ... Last Modified: May 15, 2024 ... Severity: 4-Minor ... Symptoms ... Series of 0's seen in Arcsight remote logs, in place of the Attack signature ID and Name. ... Impact ... Attack signature ID and Name is not seen in remote logs. ... Conditions ... Remote logging profile with ArcSight as logging format. ... Workaround ... Use Splunk format instead.

Additional Resources / Links

Share:

BugZero® Risk Score

What's this?

Coming soon

Status

Verified

Learn More

Search:

...