For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

fubarSUSHI's avatar
fubarSUSHI
Icon for Altocumulus rankAltocumulus
Feb 23, 2015

Logging to a different local facility?

This is going to be difficult for me to explain but Ill do my best..   I have a scenario where I want to take all my logs and log it to a different facility on the remote syslog. Im trying to s...
deployment
design
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Feb 26, 2015

Hmmm, the local5 facility is used for local logging of packet filter messages. However, I'm sure you could do something smart with syslog-ng, which is what is used by TMOS. Some customer destinations and filters and the like should do the trick.

 

You can find manuals here: http://www.balabit.com/support/documentation.

 

Be aware that the F5 configuration will be slightly different and you need to be careful that your changes are not overwritten. This will help you in some way I'm sure: https://support.f5.com/kb/en-us/solutions/public/13000/300/sol13333.html.

 

Either way, this is going to be quite a job!