For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

IRONMAN's avatar
IRONMAN
Icon for Cirrostratus rankCirrostratus
Nov 13, 2020
Solved

F5 Sending syslogs with two hostname to remote syslog server

HI All,   we have F5 Device (LTM + AFM), we configured syslog sever splunk via linux syslog server as forwarder. in Linux server each F5 creating two syslog files, only with just host name and a...
AFM
application delivery
BIG-IP
Linux server
log
LTM
security
splunk
syslog
  • IRONMAN's avatar
    IRONMAN
    May 07, 2021

    HI ,

     

    We have solution for this.

     

    https://support.f5.com/csp/article/K76259573

     

    Recommended Actions

     

    Include "options {use_fqdn(yes); keep_hostname(no); };" to syslog configuration :

     

    Use following command in CLI:

     

     tmsh modify sys syslog include "options {use_fqdn(yes); keep_hostname(no); };"

     

     

    F5 has option to mark his host name in (only host name or FQDN name) in syslog message.

     

     

     

IRONMAN's avatar
IRONMAN
Icon for Cirrostratus rankCirrostratus
May 07, 2021

HI ,

 

We have solution for this.

 

https://support.f5.com/csp/article/K76259573

 

Recommended Actions

 

Include "options {use_fqdn(yes); keep_hostname(no); };" to syslog configuration :

 

Use following command in CLI:

 

 tmsh modify sys syslog include "options {use_fqdn(yes); keep_hostname(no); };"

 

 

F5 has option to mark his host name in (only host name or FQDN name) in syslog message.