For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

simon_irwin_849's avatar
simon_irwin_849
Icon for Nimbostratus rankNimbostratus
Oct 27, 2010

High Speed Logging service requires restart

This is not strictly an iRules topic, but relates to HSL used within an iRule.     Is there a TMSH (or any other) command to restart HSL? Is it controlled by a particular service?  
application delivery
dev
devops
iRules
nitass's avatar
nitass
Icon for Employee rankEmployee
Sep 07, 2011
i run nc -l -u -p 514 as syslog server.

i was able to receive hsl log after ctrl+c and run nc again. 

[root@Edelweiss:Active] config  b version|grep -iA 1 version
BIG-IP Version 10.2.0 1707.0
Final Edition

[root@Edelweiss:Active] config  b virtual bar list
virtual bar {
   snat automap
   pool foo
   destination 172.28.17.77:http
   ip protocol tcp
   rules myrule
   profiles {
      http {}
      tcp {}
   }
}
[root@Edelweiss:Active] config  b rule myrule list
rule myrule {
   when CLIENT_ACCEPTED {
   set hsl [HSL::open -proto UDP -pool syslogp]
}
when HTTP_REQUEST {
    Log HTTP request as local7.info; see RFC 3164 Section 4.1.1 - "PRI Part" for more info
   HSL::send $hsl "<190>[clock format [clock seconds] -gmt 8] [IP::local_addr] [HTTP::uri]"
}
}
[root@Edelweiss:Active] config  b pool syslogp list
pool syslogp {
   members 192.168.206.96:shell {}
}