How to Check logs on F5 for troubleshooting purpose.

If you want particular days, say March 9th-10th, from the command line:

tmsh show /sys log ltm range 2021-03-09--2021-03-10

If you want the last couple of days:

tmsh show /sys log ltm range now-2d

Or if you want specific times on a particular day, say March 10th between 6-8am, you might just hit the log file directly with grep:

[root@ltm3:Active:Standalone] log # grep ^Mar.10.0[68].* /var/log/ltm
Mar 10 06:51:29 ltm3 warning tmm1[45470]: 01010040:4: Clock has unexpectedly adjusted by 3624277 ms
Mar 10 06:51:30 ltm3 notice tmm[45470]: 01010029:5: Clock advanced by 1204 ticks
Mar 10 06:51:31 ltm3 warning tmm[45470]: 01010040:4: Clock has unexpectedly adjusted by 3624277 ms
Mar 10 08:04:55 ltm3 warning tmm[45470]: 01010040:4: Clock has unexpectedly adjusted by 26551016 ms
Mar 10 08:04:57 ltm3 warning tmm1[45470]: 01010040:4: Clock has unexpectedly adjusted by 26551016 ms

1) Upload a fresh qkviews to F5 iHealth.

2) Click on the uploaded qkview to view its contents, then go to Files > log.

3) Search for the date (on the right side) that a qkview file encountered a problem under the Viewing Filepath.

4) To read the contents of the var/log/ltm file, click the link for that specific file. You can then determine what caused the problem.