Forum Discussion
THE_BLUE
Cirrostratus
CirrostratusApplicaton security logs stopped
There is no logs received from ASM, how to solve it ?
And how to check the utilization?
You can't view /var/log/ts/pabnagd.log?
Is it a permission issue, no bash access? Or you did not know where the file is located?
Did you check that your BIG-IP version is matching the versions listed in "Applies to (see versions):" in K93091504?
Also yesterday you mentioned that "mysql -uasm -p`perl -MF5::Cfg -e 'print F5::Cfg::get_mysql_password()'` -e "select COUNT(*) from PRX.REQUEST_LOG"" returned a count of 0. Did you recently update the box? Even in my lab machines I have a count of >1000.
- Daniel_Wolf
MVP
I think we need a bit more details.
Did it work before? Are you logging locally or remote? Both?
Are you logging violations only or all requests?
What kind of utilization do you want to check? Connections to the VS? CPU utilization on the BIG-IP device?
Some easy checks:
- Check if asmlogd is running (K14020: BIG-IP ASM daemons (11.x - 16.x)) Also check if other daemons are stuck.
- If you are logging to a remote syslog server: K86480148: Troubleshooting issues sending logs to a remote syslog server
- Check if log entries are stored in the MySQL db (K06821426: Viewing BIG-IP ASM request logs from MySQL database). Follow the steps for "Viewing the number of requests that exist within MySQL database" the number of COUNT(*) should increase.
Best of luck
THE_BLUEDid it work before? yes, only today has been stopped
Are you logging locally or remote? Both? we have both , but the issue with local logs under Event log.
Are you logging violations only or all requests? we have different profile ( all request , illegal requests)
What kind of utilization do you want to check? Connections to the VS? CPU utilization on the BIG-IP device? i don't know of this issue related to utilization, i mean i wanna check the root cause of logs issue if it is because of memory/cpu or what.
- Daniel_Wolf
Ok, so remote logging is OK, but local logging is not fully OK.
Check for stuck daemons and check if the event logs are in the MySQL db.
For CPU / Memory utilization follow this KB
- Daniel_Wolf
Try
tmsh show sys service- THE_BLUE
no asmlogd is listed when above command execute, but for asm is running.
- Daniel_Wolf
Yes, this looks OK. At least it's running.
Do you see anything odd in the log?
Did you check the steps and values mentioned in K05372587 and K06821426?
- Daniel_Wolf
@BLUE did you resolve the issue?
- THE_BLUE
yes the issue is fixed, many thanks for your support .
- Daniel_Wolf
Will you please share with us how you resolved the issue?
If any of my answer provided the solution, would you mind to mark it as best answer, so that this thread is marked as answered?