Forum Discussion

neeeewbie's avatar
Dec 16, 2022

Is it possible to block a specific log with words in local log?

Is it possible to block a specific log with words in local log?
After API communication connection, certain logs are being generated without service ID.
Is it possible to block log creation even with specific words in that log?

 

thank you!

  • If you are talking about logs which use syslog, then yes, you can, just use a syslog filter

    e.g.

    filter remove_a_line{ not match("MATCH-STRING-TO-DROP"); }; 
    log { source(src); filter(remove_a_line); destination(/var/log/messages); };

    There are other types of logs in F5 products, so if you are talking about something else you might need to be more specific.

  • If you are talking about logs which use syslog, then yes, you can, just use a syslog filter

    e.g.

    filter remove_a_line{ not match("MATCH-STRING-TO-DROP"); }; 
    log { source(src); filter(remove_a_line); destination(/var/log/messages); };

    There are other types of logs in F5 products, so if you are talking about something else you might need to be more specific.