For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

GavinW_29074's avatar
GavinW_29074
Icon for Nimbostratus rankNimbostratus
Oct 25, 2011

HSL not working?

Hi there, I'm trying to set-up an iRule to log-out access logs to a splunk syslog server using HSL. However I'm having issues with the events not getting to the syslog server... The iRu...
application delivery
dev
devops
iRules
GavinW_29074's avatar
GavinW_29074
Icon for Nimbostratus rankNimbostratus
Oct 25, 2011
Bigip is set to send to splunk using the remote-server config item using tmm...

 

 

After I posted I found a pointer which suggested running tcpdump, and that's confirmed that the packets are indeed being sent to the splunk server.

 

This then indicated a splunk issue...

 

 

Having googled a bit more, I found that the suggested solution is to use syslog-ng to receive the events, and log them out to a file that splunk can then monitor...

 

 

So having done that, i'm now getting logs coming through into splunk...

 

 

Cheers for pointers...

 

 

Regards

 

Gavin