Forum Discussion
hooleylist
Dec 07, 2011Cirrostratus
Hi Jucao,
I'd actually suggest using High Speed Logging to send a syslog message to a remote (pool of) syslog server(s) and then do your parsing there off of LTM. This will save CPU and memory on LTM. For details on this, see this recent post:
Log unique Client Addresses per (Hour|Day|Etc)
http://devcentral.f5.com/Community/GroupDetails/tabid/1082223/aff/5/afv/topic/aft/1184658/afc/1258376/Default.aspx
Aaron