For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JoshBecigneul's avatar
JoshBecigneul
Icon for MVP rankMVP
Oct 17, 2012

F5 BigIP v11 and Syslog over TCP

Hi All, I'm currently trying to configure syslog offloading and I'd like to know if there is a way through the UI (or tmsh) of setting the outbound transport to run over TCP. We don't use UDP in our ...
management
monitoring
JoshBecigneul's avatar
JoshBecigneul
Icon for MVP rankMVP
Mar 20, 2014

Andrew, You could probably do something like this. Just double up the destination and log statements. (This is untested, fyi)

tmsh modify sys syslog include "destination remote_server {tcp(\"10.1.0.100\" port (514));};filter f_alllogs {level (debug...emerg);};log {source(local);filter(f_alllogs);destination(remote_server);};destination remote_server2 {tcp(\"10.1.0.102\" port (514));};log {source(local);filter(f_alllogs);destination(remote_server2);};"