Forum Discussion

Peter_Z's avatar
Peter_Z
Icon for Cirrus rankCirrus
Jun 08, 2010

bigpipe audit logging not enabled on standby peer

Hello,

 

 

we have enabled MCP & bigpipe audit logging on our F5s to have all the configuration changes and bigpipe commands audited. After synchronizing the config, only MCP audit logging remains enabled on the standby peer. Bigpipe audit logging stays enabled on the Active unit, but after synchronizing configuration it is always disabled on the standby unit while the MCP remains enabled. We are running BIG-IP Version 9.4.5 1049.10.

 

 

We've noticed this behavior on both pairs of F5s.

 

 

Is this a known bug or intended behavior?

 

 

 

 

 

management
monitoring
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Jun 09, 2010
    Hi Peter,

     

     

    I didn't think database keys were synched across units. Or if they were, I'd guess it's only some keys. If it was all keys, you'd get unit specific keys overwritten with invalid values. You could open a support case on this to check.

     

     

    Aaron
  • Peter_Z's avatar
    Peter_Z
    Icon for Cirrus rankCirrus
    Jun 09, 2010
    I've got response from F5 support. This is a known issue in the 9.4.x code. GUI doesn't save bigpipe cli audit settings in bigip_sys.conf properly.

     

     

    Workaround is to use CLI :

     

     

    b cli audit enable

     

    b save