Forum Discussion
Download Entire Event Log
Is there a way to download the entire ASM event log into one file either through the gui or command line? I would like to periodically dump and clear the log.
12 Replies
You could scp or SFTP the log file off if you're not using ASM logging already. The ASM logfile in /var/log is already included in logrotate to archive and purge the logs.
- John_131301
Nimbostratus
Does this get the event log? If I do this and search events I still get well over 50,000 events. Does anything get stored in the database? - shaggy
Nimbostratus
/var/log/asm has many secev events, but the events shown in the configuration utility are stored in a mysql database. - John_131301
Nimbostratus
/var/log/asm currently has a size of 0 but hen I go to Security ›› Event Logs : Application : Requests I have 1755555 total entries.
- shaggy_121467
Cumulonimbus
do you currently log security events from ASM to an external log collector such as a syslog server or splunk? that's probably the best way to store/backup logged ASM events off-box
- John_131301
Nimbostratus
Yes, I send them to Splunk as well as log locally. - shaggy_121467
Cumulonimbus
why are you looking to clear all of the events? - John_131301
Nimbostratus
So when searching it doesn't have to sort through 1755555 entries.
- shaggy
Nimbostratus
do you currently log security events from ASM to an external log collector such as a syslog server or splunk? that's probably the best way to store/backup logged ASM events off-box
- John_131301
Nimbostratus
Yes, I send them to Splunk as well as log locally. - shaggy
Nimbostratus
why are you looking to clear all of the events? - John_131301
Nimbostratus
So when searching it doesn't have to sort through 1755555 entries.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com