BIG-IP

Standard

BIG-IP enables you to monitor and identify threats in your organization using BIG-IP data. Logpoint aggregates and normalizes BIG-IP logs from F5 BIG-IP platforms so you can analyze the information through dashboards. BIG-IP’s dashboards visualize event details for malware, attacks, user agents, content types, virtual server metrics, file system utilization, network traffic and system settings detected in your network. You can customize the dashboards to perform in-depth analysis by changing the data used in a search.

Release Details

Version: 6.2.0

Release date: 17 September 2026

Supported On: Guardsix SIEM v7.4.0 or later

SHA 256: a5d5c257ac70a96dbfa5954a34202ef1f6d02ad1e7316e0ce990ad63ebd52b79

BIG-IP user guide

Download

Enhancements

PLUG-18122

Added support for F5 BIG-IP v17.1.x events. The following normalization packages are added and updated:

Normalization Packages added:

LP_F5 Load Balancer v17_1
LP_F5 BIG-IP APM v17_1

Normalization Package updated:

LP_F5 BIG-IP Process

PLUG-18122

F5 BIG-IP Application Security Manager (ASM) CSV event logs can now be normalized. A new Universal Normalizer config BigIPASM is provided, which generates the application BigIPASMUniversal containing the BigIPASMCompiledNormalizer compiled normalizer to handle these CSV events.

Normalizing CSV logs requires a predefined order and if the order is not matched, further configurations may be required. Refer to Normalize BIG-IP ASM logs in CSV format for more details.

PLUG-17895

A new Normalization Package, LP_F5 BIG-IP iRule, has been added. Your F5 BIG-IP iRule logs are now normalized, so you can use them in your searches, alerts, and dashboards.

Past Releases

BIG-IP v6.1.0▾

Version: 6.1.0

Release date: April 26, 2024

Supported On: Logpoint v7.4.0 or later for log source template

SHA 256: 420321d25c6cd223396595645311a6f96a0912556bacb94efcb900ac54a90476

BIG-IP guide

Download

Enhancement

KB-22889

Added Syslog Collector based F5 log source template, simplifying the log source configuration process. To learn more, go to Creating Log Source via a Template .

Bug Fixes

KB-19137, KB-14340, KB-16573, KB-1740270254, 60537, 64623

Some F5 Big-IP logs were not normalized by F5ASMNormalizer and F5ASMCEFCompiledNormalizer.

The request_body field was not properly handled by F5ASMCEFCompiledNormalizer for an HTTP request.

KB-1872570270

Invalid keys of considerable length were created by F5ASMCEFCompiledNormalizer, consuming dynamic memory space.

BIG-IP v6.0.0▾

Version: 6.0.0

Release date: September 07, 2023

Supported On: Logpoint v6.7.4 or later

SHA 256: ab91e0ab60bad58278b227cdecba7a38a9fb6b1dc22d544247b7bf115c6830d3

BIG-IP guide

Download

Enhancements

KB-20118

Added a new compiled normalizer BigIPF5CompiledNormalizer that includes F5AFMCEFNormalizer , F5ASMCEFCompiledNormalizer and F5ASMNormalizer .

KB-1614564352, 65365

ssoMethod to sso_method
usernameSource to username_source
passwordSource to password_source
formUsername to form_username
formPassword to form_password
formAction to form_action
startURI to start_uri

KB-19137, KB-14340, KB-16573, KB-1740270254, 60537, 64623

Some F5 Big-IP logs were not normalized by F5ASMNormalizer and F5ASMCEFCompiledNormalizer.

The request_body field was not properly handled by F5ASMCEFCompiledNormalizer for an HTTP request.

KB-1872570270

Invalid keys of considerable length were created by F5ASMCEFCompiledNormalizer, consuming dynamic memory space.

Bug Fixes

KB-19137, KB-14340, KB-16573, KB-1740270254, 60537, 64623

Some F5 Big-IP logs were not normalized by F5ASMNormalizer and F5ASMCEFCompiledNormalizer.

The request_body field was not properly handled by F5ASMCEFCompiledNormalizer for an HTTP request.

KB-1872570270

Invalid keys of considerable length were created by F5ASMCEFCompiledNormalizer, consuming dynamic memory space.

BIG-IP v5.0.2▾

Version: 5.0.2

Release date: July 21, 2021

SHA 256: da767d0c949611b3abb2e5136228759274c49a775021fb2fa584d6da4009f5ee

Download

Enhancements

KB-1120247714, 49714

The normalization packages LP_F5 BIG-IP Process and LP_F5 BIG-IP APM v11_x_x have been updated to support the BIG-IP APM events.

KB-843638026

The normalization package LP_F5 Load Balancer has been updated to support the F5 WAF events.

KB-1122147692

The normalization package LP_F5 LTM and FWM has been updated to support the F5 LTM events.

Bug Fix

KB-1120247714, 49714

An issue in the normalization package LP_F5 Load Balancer v11_6 where the user field was not normalized has now been resolved.

BIG-IP v 5.0.1▾

Version: 5.0.1

Enhancement

A minor update has been done in the BIG-IP’s normalizer for better signature handling.

BIG-IP v3.5.0▾

Version: 3.5.0

Release date: May 15, 2020

SHA 256: d37ba20584bff392450bab28b1e1fc4b603426728a8bbe4b604aec442a168192

Download

Enhancement

A minor update has been done in the BIG-IP’s normalizer for better signature handling.

BIG-IP

Release Details

Enhancements

Past Releases

Enhancement

Bug Fixes

Enhancements

Bug Fixes

Enhancements

Bug Fix

Enhancement

Enhancement

Comments

Related articles