For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

HyderNBK117_311's avatar
HyderNBK117_311
Icon for Nimbostratus rankNimbostratus
Feb 28, 2017

iControl : How to read the logs of a F5 load balancer

Using iControl how can I read the current log files of a F5 load balancer. What I'm after is seeing when a user makes a change to the status of a node in a pool. This is so I can create a view-able a...
application delivery
devops
iControl
iControlREST
Satoshi_Toyosa1's avatar
Satoshi_Toyosa1
Ret. Employee
Apr 05, 2017

Audit log shows what you are after. In tmsh, you can get logs by executing:

 tmsh show sys log audit

According to the iControl REST API document below, looks like we should be able to get the log contents.

https://devcentral.f5.com/wiki/iControlREST.APIRef_tm_sys_log.ashx

Unfortunately, a request like below does not work (don't know why):

curl -sku admin:pass https://localhost/mgmt/tm/sys/log/audit

A workaround is to call the tmsh command via /mgmt/tm/util/bash:

curl -sku admin:pass -X POST -H "Content-Type: application/json"
  https://localhost/mgmt/tm/util/bash
  -d "{\"command\":\"run\", \"utilCmdArgs\": \"-c 'tmsh show sys log audit'\"}" |
  sed 's/\\n/\n/g'