Forum Discussion
THE_BLUE
Cirrostratus
CirrostratusApplicaton security logs stopped
There is no logs received from ASM, how to solve it ? And how to check the utilization?
You can't view /var/log/ts/pabnagd.log?
Is it a permission issue, no bash access? Or you did not know where the file is located?
Did you check that your BIG-IP version is matching the versions listed in "Applies to (see versions):" in K93091504?
Also yesterday you mentioned that "mysql -uasm -p`perl -MF5::Cfg -e 'print F5::Cfg::get_mysql_password()'` -e "select COUNT(*) from PRX.REQUEST_LOG"" returned a count of 0. Did you recently update the box? Even in my lab machines I have a count of >1000.
Daniel_Wolf
MVP
MVPI think we need a bit more details.
Did it work before? Are you logging locally or remote? Both?
Are you logging violations only or all requests?
What kind of utilization do you want to check? Connections to the VS? CPU utilization on the BIG-IP device?
Some easy checks:
- Check if asmlogd is running (K14020: BIG-IP ASM daemons (11.x - 16.x)) Also check if other daemons are stuck.
- If you are logging to a remote syslog server: K86480148: Troubleshooting issues sending logs to a remote syslog server
- Check if log entries are stored in the MySQL db (K06821426: Viewing BIG-IP ASM request logs from MySQL database). Follow the steps for "Viewing the number of requests that exist within MySQL database" the number of COUNT(*) should increase.
Best of luck
THE_BLUECirrostratus
CirrostratusDid it work before? yes, only today has been stopped
Are you logging locally or remote? Both? we have both , but the issue with local logs under Event log.
Are you logging violations only or all requests? we have different profile ( all request , illegal requests)
What kind of utilization do you want to check? Connections to the VS? CPU utilization on the BIG-IP device? i don't know of this issue related to utilization, i mean i wanna check the root cause of logs issue if it is because of memory/cpu or what.
- Daniel_Wolf
Ok, so remote logging is OK, but local logging is not fully OK.
Check for stuck daemons and check if the event logs are in the MySQL db.
For CPU / Memory utilization follow this KB
- THE_BLUE
Is there any command to check the stuck deamons?