Forum Discussion
NimbostratusASM logging profile response logging
Hello, I have an ASM that is enabled with a logging profile with local and remote logging. Everything is enabled on that logging profile, and the HTTP REQUEST is being send and seen in the syslog server but I am not able to get the HTTP RESPONSE logging on the syslog server using UDP or TCP protocol.
Any idea? Regards, George
7 Replies
gsharriAltostratus
Is response logging enabled in the logging profile? If so, is it "all requests" or "illegal requests only"?
Have you added items to the Storage Format list in the logging profile?
Do the responses appear on the ASM's request list?
George_33482The response is enabled with "all request" and tried all types of remote storage type (UDP and TCP)and yes the responses are showing locally but not to the remote syslog regardless of the storage type and protocol.
- George_33482
yes the ASM is sending syslog messages to the syslog. As stated previously that I am receiving "HTTP Request" in the syslog but NOT the "HTTP Response". The storage type is set to All request.
Just to illustrate more: 1- logging profile enabled locally and remotely and all requests as a storage type. 2- Locally, I can see the HTTP Requests and the HTTP Requests. 3- Remotely on syslog, I can only see the HTTP Request and NOT the HTTP Requests...
Thank you
- George_33482
yes the ASM is sending syslog messages to the syslog. As stated previously that I am receiving "HTTP Request" in the syslog but NOT the "HTTP Response". The storage type is set to All request.
Just to illustrate more: 1- logging profile enabled locally and remotely and all requests as a storage type. 2- Locally, I can see the HTTP Requests and the HTTP Requests. 3- Remotely on syslog, I can only see the HTTP Request and NOT the HTTP Responses***.... (sorry typing mistake in the previous post)
- gsharriI can confirm in v11.5.0 on my ASM that I do see request/response logs on my remote syslog server. I am using TCP to allow for larger size messages. I would run tcpdump on ASM to capture the syslog messages and confirm whether or not they contain requests and responses or requests only. If it is only requests then we know the issue is with ASM/logging profiles.
