For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ifeldshteyn_384's avatar
ifeldshteyn_384
Icon for Nimbostratus rankNimbostratus
Feb 22, 2019

F5 timestamp inquiry

Hello, we have a logfile being monitored by F5 that includes a syslog-formatted timestamp. When F5 reads the log and sends it to a secondary system, ex: Splunk, it appends another timestamp. Look at ...
devops
iRules
Samir_Jha_52506's avatar
Samir_Jha_52506
Icon for Noctilucent rankNoctilucent
Feb 23, 2019

Reviewed both the lines, Difference between logs timestamps are 1Sec. So i recommend to add one more timestamps column in splunk server.

 

ifeldshteyn_384's avatar
ifeldshteyn_384
Icon for Nimbostratus rankNimbostratus
Feb 25, 2019

Hi,

 

" I understand we can filter it out in Splunk but I don't want to waste the extra cycles as syslog is quite chatty."

 

I am trying to get rid of the timestamp on the F5 end, not on the Splunk end.

 

Thanks.