For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Tony_Jarvis_132's avatar
Tony_Jarvis_132
Icon for Altostratus rankAltostratus
May 15, 2014

Determine exact log alerts for specific events

Hi all   I have a requirement to configure an F5 LTM to send specific types of log alerts to a Splunk collector. The requirement is quite straightforward, such as:   Loss of HA connection with...
application delivery
deployment
LTM
nitass's avatar
nitass
Icon for Employee rankEmployee
May 17, 2014

i do not think there is document listing all possible log messages. anyway, you may find some log messages in alertd mapping file i.e. /var/run/bigip_error_maps.dat. then, you may customize syslog-ng configuration to send Splunk specific log message.

 

sol6420: The /var/run/bigip_error_maps.dat file maps the alertd process input from the syslog-ng utility to an alert name

 

http://support.f5.com/kb/en-us/solutions/public/6000/400/sol6420.html

 

LTM 9.4.2+: Custom Syslog Configuration by Deb Allen

https://devcentral.f5.com/s/articles/LTM-9-4-2-Custom-Syslog-Configuration