Forum Discussion

Nimbostratus

Jul 09, 2008

Can I change default syslog facilities? (9.4.3)

Hello, is there a way to change the default syslog facilities? We have an external syslog server (Not managed by us, of course;-) which only forwards facilty 7 messages to the log files ...

management

monitoring

efftee_26336

Historic F5 Account

Mar 18, 2013

The equivalent tmsh syntax is modify sys syslog include "filter f_local3a { facility(local3); }; template t_asm { template(\"<190> $DATE $HOST $MSGHDR$MSG\\n\"); template_escape(no); }; destination d_loghost5a { udp(\"2.2.2.2\" port (514) template(t_asm)); }; log { source(local); filter(f_local3a); destination(d_loghost5a); }; " and if you want to log every message into one remote syslog facility I used this CLI modify sys syslog include "template t_asm { template(\"<190> $DATE $HOST $MSGHDR$MSG\\n\"); template_escape(no); }; destination d_loghost5a { udp(\"10.255.0.1\" port (514) template(t_asm)); }; log { source(local); destination(d_loghost5a); }; "