An operator has been asked to provide a list of SSL/TLS ciphers used for the last 100 requests of a Virtual Service. The operator can't find this information in the GUI. Which action, if any…

Question

Options

• AThe operator will need to use the API since this list can only be retrieved through API.
• BThe operator can't retrieve this through the GUI since Avi does not record the ciphers for
• CThe operator will need to export the logs in a CSV file to retrieve the list of ciphers.
• DThe operator will need to enable Log all Headers in the VS configuration.

• A
  8% (2)
• B
  88% (21)
• D
  4% (1)

Explanation

Option B is correct because Avi Networks (NSX Advanced Load Balancer) simply does not record SSL/TLS cipher suite information on a per-request basis in its Virtual Service logs - the data is never captured, so no retrieval method can surface what was never stored.

Option A is wrong because the limitation is not a GUI constraint that the API can bypass; the API also cannot retrieve data that the platform never logged in the first place. Option C is wrong for the same reason - exporting logs to CSV only exports what exists in the logs, and cipher data is absent from them. Option D is wrong because "Log all Headers" captures HTTP headers (e.g., User-Agent, Host), not TLS handshake metadata like the negotiated cipher suite.

Memory tip: Think "no record, no retrieve." The question is a trap designed to make you hunt for the right method - but the real answer is that Avi never writes cipher data to its logs, making the question moot regardless of interface.

No community discussion yet for this question.