For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

asiosio_165682's avatar
asiosio_165682
Icon for Nimbostratus rankNimbostratus
Aug 12, 2014

Big-IP Syslog duplicate date

Hello, I have a F5 Big-IP 6800 in with the "BIG-IP 10.2.4 Build 817.0 Hotfix HF7" version. I have recently enabled syslog logging (see the following config): sys syslog { remote-servers { ...
application delivery
LTM
management
syslog
nitass's avatar
nitass
Icon for Employee rankEmployee
Aug 14, 2014

You can see than the datetime is duplicate..

 

would it be possible that the first date is from syslog server itself (its configuration)?

 

  • mimlo_61970's avatar
    mimlo_61970
    Icon for Cumulonimbus rankCumulonimbus
    Aug 14, 2014
    Agreed, the first one is probably the syslog server, the second one from the F5. You can probably configure the syslog server to log one or the other, but this is a perfect example of why logging both is good. Your times are not the same. Which one is right? If you only logged one, and it was the wrong one, that would make aligning events very difficult.