Forum Discussion

John_Ogle_45372's avatar
John_Ogle_45372
Icon for Nimbostratus rankNimbostratus
Sep 05, 2013

Extensive logging - best option? normal syslog? HSL? other?

I am doing some extensive logging temporarily in my irule. It was suggested that I may want to look at using HSL. The last time I tried this, the formatting was terrible. Was is the best option for l...
deployment
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Sep 06, 2013

HSL does tend to remove the event name and first word in the message (odd), but otherwise it looks exactly as it should.

when SERVER_CONNECTED { 
    log local0. "client [IP::client_addr]:[TCP::client_port] snat [IP::local_addr]:[TCP::local_port] server [IP::server_addr]:[TCP::server_port]" 
    HSL::send $hsl "HSL client [IP::client_addr]:[TCP::client_port] snat [IP::local_addr]:[TCP::local_port] server [IP::server_addr]:[TCP::server_port]" 
}

Local LTM log:

: client 10.70.0.1:59441 snat 10.70.0.100:59441 server 10.70.0.1:80

Remote syslog:

client 10.70.0.1:59441 snat 10.70.0.100:59441 server 10.70.0.1:80