Forum Discussion
Alfa-Alfa
Nimbostratus
NimbostratusASM - Event log no records to display
Hi!
i have issue with event log > application > request and i cant see event log including support id, only notice "event log no record to display" , then all the virtual server assigned logging profile but i never see that the log, previously there was no problem.
but i got the log like this.
asmlogd|INFO|Aug 12 17:35:28.546|12341|F5::RequestLog::__ANON__,,Deleting unused file /var/asmdata1/request_log/0000069229
asmlogd|INFO|Aug 12 17:35:28.546|12341|F5::RequestLog::__ANON__,,Deleting unused file /var/asmdata1/request_log/0000069169
asmlogd|INFO|Aug 12 17:35:28.546|12341|F5::RequestLog::__ANON__,,Deleting unused file /var/asmdata1/request_log/0000069246
asmlogd|INFO|Aug 12 17:35:28.546|12341|F5::RequestLog::__ANON__,,Deleting unused file /var/asmdata1/request_log/0000069223
asmlogd|INFO|Aug 12 17:35:28.546|12341|F5::RequestLog::__ANON__,,Deleting unused file /var/asmdata1/request_log/0000069304
- Aswin_mk
Cumulonimbus
Hi,
Could you please check below KB article, your issue is mentioned below. I suggesting to setup an external log server like any SIEM tool to resolve the issue and save logs
ASM local event log retention, older requests missing (f5.com)
Alfa-Alfahi!
actually i need local storage because for checking support id. is the process of dropping older partitions log asmlogd|INFO|Aug 12 17:35:28.546|12341|F5::RequestLog::__ANON__,,Deleting unused file /var/asmdata1/request_log/0000069304 and just waiting or any suggest?
- Aswin_mk
I hope you read the suggestions from F5"F5 recommends to log only illegal requests locally for Virtual Servers where ASM policy is not in learning mode. Remote logging is preferred choice for Logging all requests. This will drastically reduce the number of requests being logged allowing them to stay longer on the unit.". Please let me know if you only store illegal requests. Also you can try to check increasing disk space.
https://my.f5.com/manage/s/article/K15741187 - The "/var/asmdata1" partition is where the request log resides, so some growth is expected. Eventually the cleaning mechanism kicks in to keep the size of the request log in check.
