`dest_ip - IP address of the virtual server.` is missing from the F5 WAF for NGINX [documentation's security log attributes section](https://docs.nginx.com/waf/logging/security-logs/#available-security-log-attributes). It's shown in the F5 BIG-IP ASM documentation [here](https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-external-monitoring-implementations-13-0-0/15.html)