For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ichnafi's avatar
Ichnafi
Icon for Cirrostratus rankCirrostratus
Nov 23, 2018

F5 Analytics 3.7.x - Questions and Problems

Hello Community,

I stumbeld upon the F5 Analytics iApp and so I wanted to give it a try.

My environmental requirement:
  • Splunk Version 6.5
  • Communication from BigIP to Splunk HTTP Event Collector is working (telnet to Splunk port 8088)
  • Syslog/Analytics data MUST use Management interface of BigIP
  • no HSL
1st try:
  • iApp Version 3.7.1 (and also 3.7.2rc4)* BIG-IP v12.1.2 (Build 2.0.276) and BIG-IP v13.1.1.2 (Build 0.0.4)
  • Result: failed* Error in /var/log/ltm:

    Script (/Common/F5-Analytics-send_stats) generated this Tcl error: (script did not successfully complete: (01020036:3: The requested RADIUS Server (/Common/F5-Analytics.app) was not found.     while executing "tmsh::get_config auth radius-server /Common/$appname.app/$radius_ihealth"     invoked from within "lindex [tmsh::get_config auth radius-server /Common/$appname.app/$radius_ihealth] 0"     invoked from within "set obj [lindex [tmsh::get_config auth radius-server /Common/$appname.app/$radius_ihealth] 0]" line:41))

2nd try:
  • iApp Version 3.7.0
  • BIG-IP v12.1.2 (Build 2.0.276)
  • Result: not quite sure
  • Some Error in /var/log/ltm:

    Stats Response for F5-Analytics 1542956978 0 fail
    Data publisher not found or not implemented when processing request (unknown request), tag (2901).

Thus I seem to get Data but I don't know if this is correct.

  • Health values on "Start" Dashboard are always 0
  • Device Health 0 as well, or even NaN,
  • Most field just have no data
  • SSL Dashboard: no data
Question I still have
  • Do I have to configure Analytic Profiles on the BigIP itself to get more data?
  • when you can use only the Mgmt-Port, what are the best settings in the iApp?
  • Can i user "Module High Speed Logging Streams -> yes" when I can only use the Mgmt-Port?
  • Is there a guide, that shows how to setup the BigIP itself (i.e. analytic profiles on VS) to get the most out of the app? I followed the "Deploying the F5 Analytics iApp Template" but the result is not overwhelming
  • Is there an explanation for the meaning of all the diagramms and stuff you get? Example: What does "Server Latency Health 100,0%" mean?

I'm grateful for any hint, tip, advice from you guys.

Cheers Ichnafi

2 Replies

  • Did you ever get answers to these questions? I am implementing now and have many of the same questions.

     

  • Nope. I gave up on that stuff. But if you get it to work properly, a in depth guide would be very much appreciated :) .