For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

fmiroux_28794's avatar
fmiroux_28794
Icon for Nimbostratus rankNimbostratus
Nov 02, 2009

Audit Logging still active ?

Hello,     We have upgraded 4 Big IP LTM 1600 from version 9.4.8 to version 10.0.1 HF2. Since this upgrade, we receive a lot of snmp traps like this :     TRAP V2C INDEFINIE OID:...
management
monitoring
fmiroux_104788's avatar
fmiroux_104788
Icon for Nimbostratus rankNimbostratus
Nov 03, 2009
Hello,

 

 

Some news about my problem : there is some SOL about my audit log messages : https://support.f5.com/kb/en-us/solutions/public/10000/200/sol10261.html. This SOL explain how to enable this messages, but I want to disable that and putting "disable" to audit logging doesn't work…

 

 

I've seen some difference between version 9.4.8 and 10.0.1 in directory /etc/alertd/ :

 

 

version 10.0.1 :

 

bigip_shell_error_maps.h:0 LOG_NOTICE 012e0045 BIGIP_SHELL_BP_AUDIT "AUDIT - user %s - %s"

 

 

version 9.4.8 :

 

./bigip_shell_error_maps.h:0 LOG_ERR 012e0045 BIGIP_SHELL_BP_AUDIT "AUDIT - user %s - %s"

 

 

 

Maybe it's this parameter (LOG_NOTICE or LOG_ERR) which I should change, but how we can do that without change the file itself, but by the GUI or some bigpipe command ?

 

 

Thanks !

 

Fabien