For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Arnaud_Ciron_12's avatar
Arnaud_Ciron_12
Icon for Nimbostratus rankNimbostratus
Jan 18, 2008

How can I log access to BIGIP ?

I'd like to log (and send to remote syslog server) every access (when and who is accessing) to the BIGIP.     I don't know where to begin, except searching through the forum but still unsuccessf...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Feb 04, 2008
Access to the admin GUI is logged according to the syslog-ng.conf (/etc/syslog-ng/syslog-ng.conf). You should see log entries in /var/log/httpd/ssl_access_log and ssl_request_log. Depending on exactly how you want to handle the log entries, you could create a new filter, destination and log statement in the syslog-ng. The filter would look for the string(s) which indicate a successful and/or failed login attempt. Take a look at the existing syslog-ng.conf entries for some examples or give it a shot and reply with any questions.

 

 

Aaron