F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

adam_rothschild's avatar
adam_rothschild
Icon for Nimbostratus rankNimbostratus
Oct 20, 2015

irule to send to syslog and not write to log file

I would like an irule that sends to a syslog server rather than write the log to any logfile locally. So far I can get my log in /var/log/ltm and the syslog server that the box has set as the remote ...
application delivery
devops
iRules
LTM
Brad_Parker_139's avatar
Brad_Parker_139
Icon for Nacreous rankNacreous
Oct 20, 2015

Don't write to the local 

log
with the log command. Use HSL, https://devcentral.f5.com/wiki/iRules.HSL.ashx

when SERVER_CONNECTED {
    set hsl [HSL::open -proto UDP -pool ]
    HSL::send $hsl "[IP::client_addr], [IP::local_addr], [IP::server_addr]"
}
when SERVER_CLOSED {
    HSL::send $hsl "[IP::local_addr], [IP::server_addr]"
}
adam_rothschild's avatar
adam_rothschild
Icon for Nimbostratus rankNimbostratus
Oct 20, 2015
Is there any dependency for the syslog server set in the pool above to accept HSL? Reason I ask is that I see my irule taking hits in statistics, but never see the log in syslog.