F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

GavinW_29074's avatar
GavinW_29074
Icon for Nimbostratus rankNimbostratus
Oct 25, 2011

HSL not working?

Hi there, I'm trying to set-up an iRule to log-out access logs to a splunk syslog server using HSL. However I'm having issues with the events not getting to the syslog server... The iRu...
application delivery
dev
devops
iRules
GavinW_29074's avatar
GavinW_29074
Icon for Nimbostratus rankNimbostratus
Oct 25, 2011
Bigip is set to send to splunk using the remote-server config item using tmm...

 

 

After I posted I found a pointer which suggested running tcpdump, and that's confirmed that the packets are indeed being sent to the splunk server.

 

This then indicated a splunk issue...

 

 

Having googled a bit more, I found that the suggested solution is to use syslog-ng to receive the events, and log them out to a file that splunk can then monitor...

 

 

So having done that, i'm now getting logs coming through into splunk...

 

 

Cheers for pointers...

 

 

Regards

 

Gavin