Forum Discussion
AltostratusDo ASM Logging Profiles use HSL in v12 or v13?
Does ASM make use of HSL? And if not, can it?
As I understand it, one of the big differences under the hood between Syslog and HSL is that Syslog runs on the Linux host, constantly watches the log files and based on filters, sends them to the appropriate remote logging destination. But since it is running on the Linux host, if log traffic is really heavy it may not be able to keep up. So HSL was developed to allow TMOS to directly send logs to the remote logging server, bypassing that bottleneck.
When it comes to ASM, I don’t see anywhere in the ASM logging profile setup screen that would allow to pick an HSL profile (see below). It just asks for IP, protocol, and port. But is it possible that ASM already effectively does HSL? In other words, does my configuration here cause TMOS to send these logs directly to the server, vs relying on Syslog on the Linux host? I guess I don’t really know what ASM does with the IP address and other configuration I enter, and whether TMOS handles it itself or relies on Syslog. I noticed under "Advanced" that there is a "Facility" field, which makes it sound like syslog may be in use, but wasn't sure if that was definitive.
Chris_GrantEmployee
The short answer is yes. While you can't select an HSL logging destination when you are setting up ASM logging, you need to understand that HSL is based on ASM logging. ASM doesn't use syslog, it uses a much faster logging mechanism that was later expanded and adapted to become High Speed Logging.