Configuring Syslog Server in F5 to send all logs

Hi,

 

 

1. Create route (or check default gateway on management interface)

 

tmsh create sys management-route IP_SYSLOG gateway IP_GATEWAY_ADMIN

 

 

2. Delete previous syslog configuration (if it was)

 

tmsh modify sys syslog include none

 

 

3. Configure syslog (At least use this command, if you work with UDP syslog, just replace tcp by udp)

 

tmsh modify sys syslog include "destination remote_server {tcp(\"IP_SYSLOG\" port (514));};filter f_alllogs {level (debug...emerg);};log {source(local);filter(f_alllogs);destination(remote_server);};"

 

 

4.Commit the configuration

 

tmsh save sys config

 

 

 

Pay attention to replace IP_SYSLOG and IP_GATEWAY_ADMIN in your command.

 

 

Regards,

 

Als.