How To Create/Delete ObjectCollectionRule To Ingest Logs From Object Storage Buckets For WAF Edge Policy Logs
(Doc ID 3042331.1)
Last updated on JANUARY 08, 2025
Applies to:
OCI Logging Analytics Service - Version N/A and laterInformation in this document applies to any platform.
Goal
In this document, we will be discussing the steps require to set up the in-flow of WAF Edge Policy Logs from Object Storage Buckets into Logging Analytics.
We have a separate Source "WAF_LOGS" available specific for Edge Policy Logs. This document assumes, you already imported that Source. If not, please reach out to OCI Logging Analytics Support for the steps.
In some scenarios, users already have ObjectCollectionRule created and associated with out-of-box Source "OCI WAF Logs". This is not a valid Source for Edge Policy Logs as it does not parse the minimum require information out of the logs. For those cases, we included the steps to remove the old ObjectCollectionRule after we create the new rules.
Solution
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
| Goal |
| Solution |