Forum Discussion

ifeldshteyn_384's avatar
ifeldshteyn_384
Icon for Nimbostratus rankNimbostratus
Feb 22, 2019

F5 timestamp inquiry

Hello, we have a logfile being monitored by F5 that includes a syslog-formatted timestamp. When F5 reads the log and sends it to a secondary system, ex: Splunk, it appends another timestamp. Look at ...
devops
iRules
Samir_Jha_52506's avatar
Samir_Jha_52506
Icon for Noctilucent rankNoctilucent
Feb 23, 2019

Reviewed both the lines, Difference between logs timestamps are 1Sec. So i recommend to add one more timestamps column in splunk server.

 

  • ifeldshteyn_384's avatar
    ifeldshteyn_384
    Icon for Nimbostratus rankNimbostratus
    Feb 25, 2019

    Hi,

     

    " I understand we can filter it out in Splunk but I don't want to waste the extra cycles as syslog is quite chatty."

     

    I am trying to get rid of the timestamp on the F5 end, not on the Splunk end.

     

    Thanks.