Forum Discussion

Aurel's avatar
Aurel
Icon for Cirrus rankCirrus
Sep 12, 2013

HSL default header removing

Hi,

 

I'm wondering if it's possible to remove this header added by BigIP when using HSL :

 

2013-09-12T15:43:26.580+02:00 192.168.1.x Log_data_starts_from_here_..

 

Many thanks for any help

 

Aurel

 

4 Replies

  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus

    HSL doesn't add any headers... In fact to get it to work with syslog, you have to add the syslog message headers yourself.

     

    If that is actually in the HSL stream, then your iRule must be adding it. Otherwise it's the headers being added by syslogd itself (Which is what it really looks like).

     

    H

     

  • Hi Hamish,

     

    I can confirm that my Irule doesn't add anything, from the code i've written.

     

    Here's the end of the iRule :

     

    set Logstring "$client_ip t=$timestamp $response_time [$http_std_req_time] $http_request $status_code $content_length $referer $http_user_agent"

     

    send the string HSL::send $hsl "$Logstring"

     

    • Aurel's avatar
      Aurel
      Icon for Cirrus rankCirrus
      From my understanding, but i may be wrong, HSL is not sent through the syslog-ng daemon, then is not formatted as is. Am i wrong ?
  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus

    What's the app you're using to receive the messages on the target of the HSL?

     

    H