For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Daniel_55334's avatar
Daniel_55334
Icon for Altostratus rankAltostratus
May 20, 2008

direct ALL logs on LTM to remote server

By default the log file /var/log/tmm is not configured in the syslog-ng.conf file and so are not directed to a remote syslog server (I have configured it to direct all logs to a syslog server). I am n...
management
monitoring
Robert_Sutcliff's avatar
Robert_Sutcliff
Icon for Nimbostratus rankNimbostratus
May 27, 2008
Hi,

 

On LTM v9.4.3 and later you will find that /etc/syslog-ng/syslog-ng.conf is actually a symlink to /var/run/config/syslog-ng.conf and will therefore be re-written on boot time. The settings are instead loaded from the BigDB.

 

To forward all syslog events to a remote syslog server you can use the following statements to update the bigdb (and current config)

 

 

bigpipe syslog remote server

 

bigpipe syslog remote port 514

 

bigpipe syslog local ip

 

 

Obviously, you'll still need to setup syslog(ng) on your remote server to distinguish between the syslog facilities (and any other custom filters you wish to add)

 

Rob.