For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JDamian's avatar
JDamian
Icon for Nimbostratus rankNimbostratus
Jun 26, 2023

How to log the IP address client from an LTM policy?

Hi

I created an LTM policy which tries to log the IP address of the client according to this guide but it does not run because the text logged in /var/log/ltm is:

Refused connection to [HTTP::uri] from [IP::client_addr]

and also


Refused connection to tcl:[HTTP::uri] from tcl:[IP::client_addr]

 

The F5 BIG IP version is 16.1.3.4.

 

Best regards

 

devops

3 Replies

  • CA_Valli's avatar
    CA_Valli
    Icon for MVP rankMVP
    Jun 26, 2023

    The TCL: instruction should be called as the first parameter. in the instruction. 

    If you need multiple info to be logged, I believe you should be able to save them as variables and call them with $NAME in logging instruction. 

  • Mohamed_Ahmed_Kansoh's avatar
    Mohamed_Ahmed_Kansoh
    Icon for MVP rankMVP
    Jun 26, 2023

    Hi JDamian , 

    > Did you create the LTM policy for log client ip only ? so you match " ALL traffic and Action to Log Client IP ".
    > could you please show here the cofigured LTM policy.
    > have you attached HTTP profile in your Virtual server ? 
    > Did you put this TCL command "tcl:[IP::client_addr] " as is or what ?