For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Suresh_Jo_32729's avatar
Suresh_Jo_32729
Icon for Nimbostratus rankNimbostratus
Jul 16, 2018

F5 syslog reporting issue

With High Availability F5 pairs, should we expect to see syslog logs generated from all nodes in a cluster, or will logs only be sent by the active member of the cluster?   Do we need to restart l...
LTM
security
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Jul 17, 2018

Hi,

 

the logs are sent by the 2 members of the cluster but be careful you have to diferentiate them.

 

Active memeber will sent:

 

  • Business logs (which is normal because it is this active memeber that manages the traffic): APM, ltm (Irule), ASM, ...
  • System logs: error, audit...
  • HSL that you set
  • request logging
  • ...

Standby member will sent:

 

  • only system logs: audit, error, ....

Hope it's clear, keep me in touch if you need more details.

 

regards