From 5d67f075c37223867e7bae177155a474074d248a Mon Sep 17 00:00:00 2001 From: Paul Abel Date: Thu, 2 Oct 2025 09:46:58 +0100 Subject: [PATCH 1/3] NIC: Add securityLogs table to WAF policy --- content/nic/configuration/policy-resource.md | 21 ++++++++++++++++---- 1 file changed, 17 insertions(+), 4 deletions(-) diff --git a/content/nic/configuration/policy-resource.md b/content/nic/configuration/policy-resource.md index 8efcc0064..ff449b78b 100644 --- a/content/nic/configuration/policy-resource.md +++ b/content/nic/configuration/policy-resource.md @@ -822,10 +822,23 @@ waf: |``enable`` | Enables F5 WAF for NGINX. | ``bool`` | Yes | |``apPolicy`` | The [F5 WAF for NGINX policy]({{< ref "/nic/installation/integrations/app-protect-waf/configuration.md#waf-policies" >}}) of the WAF. Accepts an optional namespace. Mutually exclusive with ``apBundle``. | ``string`` | No | |``apBundle`` | The [F5 WAF for NGINX policy bundle]({{< ref "/nic/installation/integrations/app-protect-waf/configuration.md#waf-bundles" >}}). Mutually exclusive with ``apPolicy``. | ``string`` | No | -|``securityLog.enable`` | Enables security log. | ``bool`` | No | -|``securityLog.apLogConf`` | The [F5 WAF for NGINX log conf]({{< ref "/nic/installation/integrations/app-protect-waf/configuration.md#waf-logs" >}}) resource. Accepts an optional namespace. Only works with ``apPolicy``. | ``string`` | No | -|``securityLog.apLogBundle`` | The [F5 WAF for NGINX log bundle]({{< ref "/nic/installation/integrations/app-protect-waf/configuration.md#waf-bundles" >}}) resource. Only works with ``apBundle``. | ``string`` | No | -|``securityLog.logDest`` | The log destination for the security log. Only accepted variables are ``syslog:server=; localhost; fqdn>:``, ``stderr``, ````. | ``string`` | No | +|``securityLog.enable`` | **Deprecated:** Enables security log. | ``bool`` | No | +|``securityLog.apLogConf`` | **Deprecated:** The [F5 WAF for NGINX log conf]({{< ref "/nic/installation/integrations/app-protect-waf/configuration.md#waf-logs" >}}) resource. Accepts an optional namespace. Only works with ``apPolicy``. | ``string`` | No | +|``securityLog.apLogBundle`` | **Deprecated:** The [F5 WAF for NGINX log bundle]({{< ref "/nic/installation/integrations/app-protect-waf/configuration.md#waf-bundles" >}}) resource. Only works with ``apBundle``. | ``string`` | No | +|``securityLog.logDest`` | **Deprecated:** The log destination for the security log. Only accepted variables are ``syslog:server=; localhost; :``, ``stderr``, ````. | ``string`` | No | +|``securityLogs`` | Add a condition to a rate-limit policy. | [waf.securityLogs](#wafsecurityLogs) | No | +{{% /table %}} + +### WAF.SecurityLogs + +{{% table %}} +|Field | Description | Type | Required | +| ---| ---| ---| --- | +|``enable`` | Enables security log. | ``bool`` | No | +|``apLogConf`` | The [App Protect WAF log conf]({{< ref "/nic/installation/integrations/app-protect-waf/configuration.md#waf-logs" >}}) resource. Accepts an optional namespace. Only works with ``apPolicy``. | ``string`` | No | +|``apLogBundle`` | The [App Protect WAF log bundle]({{< ref "/nic/installation/integrations/app-protect-waf/configuration.md#waf-bundles" >}}) resource. Only works with ``apBundle``. | ``string`` | No | +|``logDest`` | The log destination for the security log. Only accepted variables are ``syslog:server=; localhost; :``, ``stderr``, ````. | ``string`` | No | + {{% /table %}} #### WAF Merging Behavior From 46ebb3d2e271b462a874e637e75921b46d723d39 Mon Sep 17 00:00:00 2001 From: Paul Abel <128620221+pdabelf5@users.noreply.github.com> Date: Thu, 2 Oct 2025 10:46:54 +0100 Subject: [PATCH 2/3] Update content/nic/configuration/policy-resource.md Co-authored-by: Venktesh Shivam Patel --- content/nic/configuration/policy-resource.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/nic/configuration/policy-resource.md b/content/nic/configuration/policy-resource.md index ff449b78b..ea94d6a32 100644 --- a/content/nic/configuration/policy-resource.md +++ b/content/nic/configuration/policy-resource.md @@ -826,7 +826,7 @@ waf: |``securityLog.apLogConf`` | **Deprecated:** The [F5 WAF for NGINX log conf]({{< ref "/nic/installation/integrations/app-protect-waf/configuration.md#waf-logs" >}}) resource. Accepts an optional namespace. Only works with ``apPolicy``. | ``string`` | No | |``securityLog.apLogBundle`` | **Deprecated:** The [F5 WAF for NGINX log bundle]({{< ref "/nic/installation/integrations/app-protect-waf/configuration.md#waf-bundles" >}}) resource. Only works with ``apBundle``. | ``string`` | No | |``securityLog.logDest`` | **Deprecated:** The log destination for the security log. Only accepted variables are ``syslog:server=; localhost; :``, ``stderr``, ````. | ``string`` | No | -|``securityLogs`` | Add a condition to a rate-limit policy. | [waf.securityLogs](#wafsecurityLogs) | No | +|``securityLogs`` | Config for security log destinations. | [waf.securityLogs](#wafsecurityLogs) | No | {{% /table %}} ### WAF.SecurityLogs From 4ebbfb96638a9275ee4df6fbab7e49c0a66d2597 Mon Sep 17 00:00:00 2001 From: Paul Abel <128620221+pdabelf5@users.noreply.github.com> Date: Thu, 2 Oct 2025 10:47:07 +0100 Subject: [PATCH 3/3] Update content/nic/configuration/policy-resource.md Co-authored-by: Venktesh Shivam Patel --- content/nic/configuration/policy-resource.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/nic/configuration/policy-resource.md b/content/nic/configuration/policy-resource.md index ea94d6a32..2ef536f3c 100644 --- a/content/nic/configuration/policy-resource.md +++ b/content/nic/configuration/policy-resource.md @@ -829,7 +829,7 @@ waf: |``securityLogs`` | Config for security log destinations. | [waf.securityLogs](#wafsecurityLogs) | No | {{% /table %}} -### WAF.SecurityLogs +#### WAF.SecurityLogs {{% table %}} |Field | Description | Type | Required |