Forum Discussion

rjordan's avatar
rjordan
Icon for Nimbostratus rankNimbostratus
May 10, 2013

description for log status codes?

My F5 LTMs are sending syslogs to a Splunk server. In Splunk, I setup field extractions so I can search based on severity (error, notice, info, etc.), service (tmm, mcpd, etc.) and status codes. The problem I'm having is the status code is just a 8 digit code. Is there a document or article that explains what the codes stand for?

 

management
monitoring

2 Replies

  • rjordan's avatar
    rjordan
    Icon for Nimbostratus rankNimbostratus
    May 13, 2013
    I opened a ticket with F5 and the engineer pointed me to /etc/alertd. This directory has dozens of files that list the status codes along with their descriptions.
  • mkahler_108475's avatar
    mkahler_108475
    Historic F5 Account
    May 13, 2013
    You can also use /var/run/bigip_error_maps.dat as this is all the map files.

     

     

    grep 01070638 /var/run/bigip_error_maps.dat

     

    0 LOG_NOTICE 01070638 BIGIP_MCPD_MCPDERR_POOL_MEMBER_MON_STATUS "Pool member %s:%u monitor status %s."

     

     

    sol6420: The /var/run/bigip_error_maps.dat file maps the alertd process input from the syslog-ng utility to an alert name