For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Guillaume_Nourr's avatar
Guillaume_Nourr
Icon for Altostratus rankAltostratus
Mar 11, 2015

APM Web Application Trace not logging anything on Big-IP 11.6

Hi,

I want to run an Web Application Trace to troubleshoot an issue, however, nothing is written to the log folder. (link text)

Here's my process :

tmsh modify /sys db "log.webapplications.level" { value "debug" }
tmsh modify /sys db "log.webapplications.trace.sessionid" { value "SESSIONID" }

ls /var/tmp/WebAppTrace 
    ==> is empty

What am I doing wrong?

BIG-IP Access Policy Manager (APM)
security
TMSH

3 Replies

  • amolari's avatar
    amolari
    Icon for Cirrostratus rankCirrostratus
    Mar 11, 2015

    Is your resource a web application or are you working in APM+LTM mode? Only web app is supported with webapptrace, not APM+LTM.

    If WebApp, if you're entering a valide session-id number and terminate it then (trace finished) with 

    /usr/bin/webtrace.finish

    you should see a directory 

    /var/tmp/WebAppTrace//
    with the files.

  • Guillaume_Nourr's avatar
    Guillaume_Nourr
    Icon for Altostratus rankAltostratus
    Mar 11, 2015

    I'm a bit lost here. Both APM and LTM are active, and our application has a virtual server with an APM policy associated. Is this the not supported scenario?

     

  • Wojciech_Wypior's avatar
    Wojciech_Wypior
    Icon for Nimbostratus rankNimbostratus
    Mar 27, 2015

    There are few things you need to ensure that you do:

     

    • Check that you are indeed using Portal Access resource in your policy.

       

    • If the above is true then to enable webtrace do the following:

       

    tmsh modify /sys db "log.webapplications.level" { value "notice" } <=== do not use debug unless instructed by F5 as this impacts performance of the Portal Access.

     

    tmsh modify /sys db "log.webapplications.trace.sessionid" { value "SESSIONID" }

     

    • If the webtrace is still not saved, then restart rewrite service, and this will rectify the issue:

    bigstart restart rewrite