Forum Discussion

Suresh_Jo_32729's avatar
Suresh_Jo_32729
Icon for Nimbostratus rankNimbostratus
Jul 16, 2018

F5 syslog reporting issue

With High Availability F5 pairs, should we expect to see syslog logs generated from all nodes in a cluster, or will logs only be sent by the active member of the cluster?

 

Do we need to restart log forwarding services after updating a logging destination for the change to take effect?

 

LTM
security

2 Replies

Sort By
  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    Jul 17, 2018

    Hi,

     

    the logs are sent by the 2 members of the cluster but be careful you have to diferentiate them.

     

    Active memeber will sent:

     

    • Business logs (which is normal because it is this active memeber that manages the traffic): APM, ltm (Irule), ASM, ...
    • System logs: error, audit...
    • HSL that you set
    • request logging
    • ...

    Standby member will sent:

     

    • only system logs: audit, error, ....

    Hope it's clear, keep me in touch if you need more details.

     

    regards