you forgot black slash (\) on d_ltm configuration. others are okay.
[root@ve1023:Active] config b version|grep -iA 1 version
BIG-IP Version 10.2.3 112.0
Final Edition
[root@ve1023:Active] config b syslog include
SYSLOG - Include Data: none
[root@ve1023:Active] config
[root@ve1023:Active] config bigpipe syslog include '"
> filter f_local0 {
> facility(local0) and not match(\": \");
> };
> filter f_local0_customlog {
> facility(local0) and match(\": \");
> };
> destination d_ltm {
> file(\"/var/log/ltm\" create_dirs(yes));
> };
> destination d_customlog {
> file(\"/var/log/customlog\" create_dirs(yes));
> };
>
> log {
> source(local);
> filter(f_local0_customlog);
> destination(d_customlog);
> };
>
> log {
> source(local);
> filter(f_local0);
> destination(d_ltm);
> };
>
> "'
[root@ve1023:Active] config
[root@ve1023:Active] config b syslog include
SYSLOG - Include Data:
filter f_local0 {
facility(local0) and not match(": ");
};
filter f_local0_customlog {
facility(local0) and match(": ");
};
destination d_ltm {
file("/var/log/ltm" create_dirs(yes));
};
destination d_customlog {
file("/var/log/customlog" create_dirs(yes));
};
log {
source(local);
filter(f_local0_customlog);
destination(d_customlog);
};
log {
source(local);
filter(f_local0);
destination(d_ltm);
};
[root@ve1023:Active] config
[root@ve1023:Active] config b syslog include none
[root@ve1023:Active] config b syslog include
SYSLOG - Include Data: none