For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Leon_Kyneur_542's avatar
Leon_Kyneur_542
Icon for Nimbostratus rankNimbostratus
Mar 22, 2010

Continuous monitor status up

Hello all,

just looking at the logs on our BIG-IP and am puzzled as to why i'm recieving 'monitor status up' messages on nodes without the 'monitor status down' message: 

 
 Mar 22 10:00:43 bigip1 mcpd[1831]: 01070727:5: Pool member xxx.xxx.xxx.5:80 monitor status up. 
 Mar 22 10:01:24 bigip1 mcpd[1831]: 01070727:5: Pool member xxx.xxx.xxx.4:80 monitor status up. 
 Mar 22 10:01:45 bigip1 mcpd[1831]: 01070727:5: Pool member xxx.xxx.xxx.4:80 monitor status up. 
 Mar 22 10:02:44 bigip1 mcpd[1831]: 01070727:5: Pool member xxx.xxx.xxx.5:80 monitor status up. 
 Mar 22 10:16:44 bigip1 mcpd[1831]: 01070727:5: Pool member xxx.xxx.xxx.4:80 monitor status up. 
 Mar 22 10:17:04 bigip1 mcpd[1831]: 01070727:5: Pool member xxx.xxx.xxx.4:80 monitor status up.

is there a simple explanation for this?

Regards,

Leon
management
monitoring

9 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Mar 22, 2010
    Hi Leo,

     

     

    Which ltm version are you running? Do you have a custom syslog-ng configuration that might be sending the down messages to a remote sylsog server instead of logging them locally?

     

     

    Aaron
  • Leon_Kyneur_542's avatar
    Leon_Kyneur_542
    Icon for Nimbostratus rankNimbostratus
    Mar 23, 2010
    Hi Hoolio,

     

     

    BIG-IP 9.4.4 Build 73.1 Hotfix HF1

     

     

    We are logging to a remote syslog server though no syslog-ng specific changes have been made (in the way of filtering particular messages etc..). We do see down log entries as well as up in some instances, though I just thought it was odd to see two concurrent up messages without the down.
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Mar 23, 2010
    Hi Leon,

     

     

    Do you see any entries in the /var/log/ltm log file for suppress or throttling of messages?

     

     

    Aaron
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Mar 25, 2010
    Hi Leon,

     

     

    I'm not sure what would explain the log events you're (not) seeing. Maybe F5 Support would have an idea. If you figure more out on this, could you reply back for future reference?

     

     

    Thanks,

     

    Aaron
  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus
    Mar 29, 2010
    Hmm... I've seen this in 10.1 logs as well... (I haven't checked 9.4.8logs for it yet).

     

     

    H
  • Kleython_Kell_5's avatar
    Kleython_Kell_5
    Icon for Nimbostratus rankNimbostratus
    Jan 24, 2013
    Hello people,, I am having the same message in 9.4.8 . Did you understand the message? could solve this? any solution or is this a normal behavior ?

     

     

    thanks alot
  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Jan 25, 2013
    is this relevant?

     

     

    sol9511: Health monitors log up repeatedly without logging down

     

    http://support.f5.com/kb/en-us/solutions/public/9000/500/sol9511