Forum Discussion

Eesh_26306's avatar
Eesh_26306
Icon for Nimbostratus rankNimbostratus
Feb 05, 2014

iRule for syslogging of portal status

Hi, I wish to log web portal (HTTP and HTTPS) status in external syslog server. Believe that iRule can do the job. Would appreciate if somebody can help on this.

 

Thanks Eesh

 

4 Replies

  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus

    You mean like Apache access logs? Or did you want something to log when it goes up/down (Which wouldn't be iRules).

     

    H

     

  • Hi Hamish,

     

    I wish to log warning and above events generated by web portal including audit logs- user login (not the apache access log),

     

  • I wish to log warning and above events generated by web portal including audit logs- user login (not the apache access log)

     

    i might be lost. the event is generated by server but you want f5 to send it to remote syslog, don't you?

     

  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus

    If you want useful user login etc, you'll have to drop a user event into the VPE and log the info via an iRule...

     

    The iRule is pretty simple. I think there's an example in the APM example deployments manual... As for the warnings/errors, you'll need to forward the APM logs file (/var/log/apm) off to a suitable remote syslog server for that really... Otherwise I'm not sure you could get decent alerts for things like secured server failures... Just a generic authentication failure...

     

    H