For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

rafaelbn's avatar
rafaelbn
Icon for Cirrostratus rankCirrostratus
Sep 29, 2020

BIG-IP send all syslog messages as local5 facility

Hello Devs! Our client wants every syslog message sent by the BIG-IP to be on local5 facility. I understand that this is not the behavior of syslog-ng. But is it possible? I tinkered around the sy...
application delivery
BIG-IP
syslog
TMOS
boneyard's avatar
boneyard
Icon for MVP rankMVP
Oct 22, 2020

i dont believe this is easily possible. the BIG-IP uses many different facility values itself by default, so changing those will confuse system that asume the default ones.

 

you might be able to overwrite something by tinkering in the syslog-ng.conf but i wouldnt advise that.

 

i assume you want this to recognize the logging better on the syslog server? isn't that possible on source IP or such?