Nimbostratus
NimbostratusHow can I use iRules or LTM Policies to monitor all connection flows.
Please share me guide. Thanks
EmployeeSure. BIG-IP can definitely log data about all connection flows.
If you don't know what data you need to monitor, you'd probably start with a generic one. We do have such generic article here:
Log client to vip connections | DevCentral
NimbostratusI want to monitor output of command "tmsh show sys connection cs-client-addr".
Maybe like this :
tmsh show sys connection cs-client-addr 10.10.10.77
Sys::Connections
10.10.10.77:55130 10.10.10.69:22 10.10.10.60:55130 10.10.10.71:22 tcp 241 (tmm: 1) none none
Total records returned: 1
EmployeeThis command will give you a snapshot of the connection table.
Be aware that this command enumerates all of the flows on the BIG-IP, which gets more expensive as the count of connections increases and can impact system stability. Read this article for more information on that:
https://my.f5.com/manage/s/article/K53851362
NimbostratusYes, I know this, but I want to forward output of this command to External Server, maybe Splunk to monitor connection on the BIG-IP