For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mrblau_142342's avatar
mrblau_142342
Icon for Nimbostratus rankNimbostratus
Aug 06, 2014

HSL on APM

I setup HSL to syslog on APM and am getting unexpected behavior. When using HSL my logs no longer continue to write locally i.e. /var/log/apm. Is this the expected behavior? If it is the expected beh...
BIG-IP Access Policy Manager (APM)
design
security
mrblau_142342's avatar
mrblau_142342
Icon for Nimbostratus rankNimbostratus
Aug 06, 2014

I set this all up through the GUI but have looked at the irule possibilities. My access policy logging is set to debug. As soon as I add a filter for remote and set the log publisher to remote syslog accordingly http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-external-monitoring-implementations-11-3-0/2.html If I ad filters for each type of logging and set it to local I get all my local logging back but my remote logging goes away. I don't beleive that having a filter for every local log is the correct way to do it. I must be missing something.

 

  • TJ_Vreugdenhil's avatar
    TJ_Vreugdenhil
    Icon for Cirrus rankCirrus
    Aug 07, 2014
    I tried setting it up via the GUI but it never really worked right for me either. Do you mind opening a support case and responding back?
  • mrblau_142342's avatar
    mrblau_142342
    Icon for Nimbostratus rankNimbostratus
    Sep 03, 2014
    After opening a case I got this working by adding local-syslog to my syslog publisher. would be nice if the instructions said local logging stops working unless you add it as well.