For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

RobMichel_78550's avatar
RobMichel_78550
Icon for Nimbostratus rankNimbostratus
Jul 01, 2010

Logging on newer versions of Code.

I'm starting to hear rumors that newer versions of Code will do logging a lot differently, were it will all be shipped of to a logging server, and not in real time when it is. Can anyone elaborate or point me to be link that had more info ?

 

 

Thanks!

 

 

config
design

2 Replies

  • George_Watkins_'s avatar
    George_Watkins_
    Historic F5 Account
    Jul 01, 2010
    Hi Rob,

     

     

    I believe you are referring to HSL (High Speed Logging). HSL is a newer feature for shipping logs to a single logging server or a pool of logging servers. It is unformatted by default, but can be formatted for syslog or whatever logging service you might be using. Colin does an excellent job of giving an overview of HSL in this Post of the Week: http://devcentral.f5.com/weblogs/dctv/archive/2010/03/11/post-of-the-week-ndash-high-speed-logging-irules-and.aspx

     

     

    While HSL is an excellent addition to the code it will not be completely replacing syslog. As such all the functionality of syslog will remain in place. I hope this answers your question.

     

     

    Best regards,

     

     

    George
  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus
    Jul 02, 2010
    Being new though, it has a few problems in 10.1.0. It's better in 10.2.0, but still has a nasty habit of leaving a hanging connection to a down HSL server (When running with a TCP connection). Also there appears to be no way to control HSL connections. e.g. Limit the number, force a re-open (Besides restarting tmm).

     

     

     

    H