Forum Discussion
kiwibloke_17342
Mar 27, 2012Nimbostratus
HSL logging sending multiple log entries in one message?
Hi,
I have an iRule that generates Apache style "combined" format access logs for one of our sites. it is based on the iRule for "W3c logging".
Our LTMs run 10.x so HSL is an optio...
Jessie_O__45052
Mar 28, 2012Historic F5 Account
Classical syslog (RFC3164) expects one message per UDP packet with
no terminating newline. Many servers also support TCP transport and
expect the messages to be separated by newlines, but there is no formal
standard for this -- even the later RFC5424 does not define how messages
should be separated when encapsulated in protocols other than UDP.
Your iRule is not providing a separator, so message separation is essentially being left up to server intelligence and luck. If you add a "\n" to the end of your string, your problems should go away :).
It would be possible to make HSL::send "smart" enough to automagically append a newline when logging to a TCP destination and add a -nonewline flag for users who really do want a "raw" send so they can use arbitrary separators. OTOH, any time you make something "smart", you also make it more confusing.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects