Skip to content

docs(nginx-one): add local troubleshooting and verification guide for security monitoring#1861

Open
kamalchaturvedi wants to merge 3 commits intonginx:mainfrom
kamalchaturvedi:main
Open

docs(nginx-one): add local troubleshooting and verification guide for security monitoring#1861
kamalchaturvedi wants to merge 3 commits intonginx:mainfrom
kamalchaturvedi:main

Conversation

@kamalchaturvedi
Copy link
Copy Markdown
Contributor

@kamalchaturvedi kamalchaturvedi commented Apr 17, 2026

#1862

Proposed changes

Checklist

Before sharing this pull request, I completed the following checklist:

Footnotes

  1. Potentially sensitive information includes personally identify information (PII), authentication credentials, and live URLs. Refer to the style guide for guidance about placeholder content.

-  Clarify where to place the secops_dashboard logging directives in the NGINX
  configuration and expand the verification flow into a concrete end-to-end
  check using the Security Dashboard Event Logs tab.

- Add labeled example test requests for common attack patterns (XSS, path
  traversal, SQL injection) so operators can generate sample security events
  while setting up the default blocking policy. Document that customized or
  transparent policies may alert instead of block.
- Add a new local data plane troubleshooting guide for NGINX One security
  monitoring to help customers diagnose why F5 WAF for NGINX security events
  do not appear in the dashboard after setup.

- The new guide covers four checks:
  - invalid secops_dashboard log profile errors in the embedded collector log
  - port 1514 ownership for local syslog delivery
  - presence of the generated security log pipeline in the collector config
  - optional debug exporter configuration for collector-side verification

  Also update the main security monitoring setup guide to improve verification,
  add labeled example attack requests for generating test events, and link to
  the new troubleshooting workflow. Update the section landing page so the new
  guide is discoverable from the security monitoring docs.
@kamalchaturvedi kamalchaturvedi requested a review from a team as a code owner April 17, 2026 22:42
@github-actions github-actions bot added documentation Improvements or additions to documentation product/nginx-one-console Issues related to NGINX One Console labels Apr 17, 2026
@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 17, 2026

✅ All required contributors have signed the F5 CLA for this PR. Thank you!
Posted by the CLA Assistant Lite bot.

@kamalchaturvedi
Copy link
Copy Markdown
Contributor Author

I have hereby read the F5 CLA and agree to its terms

@travisamartin travisamartin self-requested a review April 17, 2026 23:48
…rd/local-dataplane-troubleshooting.md


Update as recommended

Co-authored-by: Travis Martin <33876974+travisamartin@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation product/nginx-one-console Issues related to NGINX One Console

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants