For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

immu's avatar
immu
Icon for Cirrus rankCirrus
Jun 21, 2017
Solved

How to Check logs on F5 for troubleshooting purpose.

Please let me know how do we check logs on F5 for troubleshooting purpose  
LTM
security
TMSH
immu's avatar
immu
Icon for Cirrus rankCirrus
Jun 21, 2017

Really appreciate the answers give by all...but if I need to filter the logs for one particular day and time then how can do it..

 

Thanks in advance

 

JRahm's avatar
JRahm
Icon for Admin rankAdmin
Mar 10, 2021

If you want particular days, say March 9th-10th, from the command line:

 

tmsh show /sys log ltm range 2021-03-09--2021-03-10

 

If you want the last couple of days:

 

tmsh show /sys log ltm range now-2d

 

Or if you want specific times on a particular day, say March 10th between 6-8am, you might just hit the log file directly with grep:

 

[root@ltm3:Active:Standalone] log # grep ^Mar.10.0[68].* /var/log/ltm
Mar 10 06:51:29 ltm3 warning tmm1[45470]: 01010040:4: Clock has unexpectedly adjusted by 3624277 ms
Mar 10 06:51:30 ltm3 notice tmm[45470]: 01010029:5: Clock advanced by 1204 ticks
Mar 10 06:51:31 ltm3 warning tmm[45470]: 01010040:4: Clock has unexpectedly adjusted by 3624277 ms
Mar 10 08:04:55 ltm3 warning tmm[45470]: 01010040:4: Clock has unexpectedly adjusted by 26551016 ms
Mar 10 08:04:57 ltm3 warning tmm1[45470]: 01010040:4: Clock has unexpectedly adjusted by 26551016 ms