For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

drandhawa_35784's avatar
drandhawa_35784
Icon for Nimbostratus rankNimbostratus
Apr 05, 2018

Best Way to forward logs to syslog server

Hi   I have seen multiple documents on sending logs to my syslog server, is this the right document https://support.f5.com/csp/article/K13080   and is this the only step: Adding a remote syslog...
ASM Advanced WAF
BIG-IP
devops
security
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Apr 05, 2018

Hi,

 

In fact everything depends on the logs that you want to send to your server. You can use high-speed remote logging. You can configure the BIG-IP system to log information about BIG-IP system processes and send the log messages to remote high-speed log servers. You can filter the data that the system logs based on alert-level and source.

 

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-external-monitoring-implementations-11-3-0/2.html

 

You can also send some information according to your convenience via an irule:

 

https://devcentral.f5.com/Wiki/Default.aspx?Page=Simple-Login-Wall-iRule-Redirect-unauthenticated-users-back-to-login-page&NS=iRules

 

otherwise you can also send the logs with "Adding a remote syslog server". but as explained above everything depends on the logs you want to send.

 

Regards