For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Eslam_Ahmed_630's avatar
Eslam_Ahmed_630
Icon for Nimbostratus rankNimbostratus
Feb 15, 2012

create logs for LTM

Dears,

 

 

i need to create an iRule for generating logs for LTM including Client IPs, TCP port and the requested IP "vip IP"

 

 

i had a one but i don't know if is it right or not.

 

 

when CLIENT_ACCEPTED {

 

log local0. "[IP::client_addr]:[TCP::client_port]: New connection from client to VIP. Requested IP:port: [IP::local_addr]:[TCP::local_port]"

 

}

 

 

also i need to know how could i enable it for logging

 

 

Thanks in advance

 

 

Best Regards

 

application delivery
dev
devops
iRules

3 Replies

  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Feb 15, 2012
    have you seen this one?

     

     

    Log Http Tcp Udp To Syslogng

     

    http://devcentral.f5.com/wiki/iRules.LogHttpTcpUdpToSyslogng.ashx
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Feb 15, 2012
    Hi Eslam,

     

     

    Your rule should work find to log the VIP IP:port on each new connection. Nitass gave a few more examples for different iRule log options. I'd recommend using High Speed Logging to send the logs to a remote syslog pool instead of logging each connection to the local disk. Doing the latter will eat up a lot of CPU cycles and disk I/O.

     

     

    http://devcentral.f5.com/wiki/iRules.hsl.ashx

     

     

    Aaron