HSL on APM

Under the WebUI > System > Logs > Configuration > Options - do you have "Notice" set for your Access Policy Manager log settings? If you are getting the messages in syslog, you should be getting them locally as well. Can you check /var/log/ltm as well?

Are you using an iRule to do the HSL or the GUI? I have done this using an iRule for local and remote HSL logging.

Here are the posts:

HSL local logging: https://devcentral.f5.com/questions/w3c-logging-issue-httpusername-does-not-populateanswer90350

HSL remote logging: https://devcentral.f5.com/questions/w3c-remote-logging-to-multiple-syslog-servers-at-onceanswer90200

Under the WebUI > System > Logs > Configuration > Options - do you have "Notice" set for your Access Policy Manager log settings? If you are getting the messages in syslog, you should be getting them locally as well. Can you check /var/log/ltm as well?

Are you using an iRule to do the HSL or the GUI? I have done this using an iRule for local and remote HSL logging.

Here are the posts:

HSL local logging: https://devcentral.f5.com/questions/w3c-logging-issue-httpusername-does-not-populateanswer90350

HSL remote logging: https://devcentral.f5.com/questions/w3c-remote-logging-to-multiple-syslog-servers-at-onceanswer90200

I set this all up through the GUI but have looked at the irule possibilities. My access policy logging is set to debug. As soon as I add a filter for remote and set the log publisher to remote syslog accordingly http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-external-monitoring-implementations-11-3-0/2.html If I ad filters for each type of logging and set it to local I get all my local logging back but my remote logging goes away. I don't beleive that having a filter for every local log is the correct way to do it. I must be missing something.