For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mr_K_130002's avatar
Mr_K_130002
Icon for Nimbostratus rankNimbostratus
Oct 22, 2013

irule to filter out all local0

Hello everyone...   I'm a noob to irules, and I would like to start high speed logging, and filter out all local0 messages and prevent them from being transmitted, all other messages should be sen...
application delivery
devops
iRules
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 22, 2013

Just for clarification, are you wanting to send all local0 (and other facilities logs) to one syslog server, and then specific traffic to another? An HSL is only going to send what you want it to send, so you could:

 

  • Modify local syslog-ng to send multiple facilities to a syslog server (vs. local)

sol13083: Configuring syslog settings from the command line (11.x)

 

Traffic Management Shell (tmsh) Reference Guide

 

  • Configure an HSL iRule or a request logging profile to send specific information to another syslog server.