Forum Discussion
Sheigh_65772
Cirrus
CirrusLTM 11.X iRule Errors missing in /var/log/ltm
Hello,
Did some searches and didn't find a solution. I recently upgraded my 9.4 LTM to 11.x in dev and had some irule issues with the migration. This Friday I will be performing a migration onto new hardware going from 9.4 to 11.x for production.
In 9.4 I've been used to seeing where irules break by looking at the /var/log/ltm file as it will show the irule and the context for the error. When I performed the migration I experianced iRule errors but they weren't showing up in the /var/log/ltm.
In preperation for this coming producation migration should I be looking for errors in a different location? Maybe theres some additional logging settings I need to configure?
Heres the log settings from my prepped 11.x bigip_base.conf
sys daemon-log-settings tmm {
http-log-level debug
ip-log-level notice
irule-log-level debug
net-log-level debug
ssl-log-level debug
}
Thanks
hooleylistCirrostratus
By default, iRule errors and logs should be sent to /var/log/ltm. Do you have a custom syslog-ng config (bigip_sys.conf -> /etc/syslog-ng/syslog-ng.conf)? Are you logging remotely?
Aaron
Sheigh_65772There is no customization to the logging except for those changes I listed made via the web interface and no remote logging service is configured.
nitassEmployee
When I performed the migration I experianced iRule errors but they weren't showing up in the /var/log/ltm.was it an error when converting config (including irule) to 11.x? or was it an irule error when passing traffic in 11.x?- Sheigh_65772In this case it isn't an ideal situation. We have old hardware at 9.4.8 which doesn't support some of the 10.x versions and we are migrating to new hardware that came preloded with a 10.x version our hw didnt support (now updated to 11.2).
The decision was to go directly from the 9.4.8 to 11.2 without perfoming the upgrades inbetween because. This was because the 10.x systems utilized raided discks and F5 support said that there may be a possibility of losing that performance gain when going through the downgrade to 9.4 then upgrading to 11.
Chances are the upgrade process would have caught the problems. These specific errors from when I did dev was when in an irule matchclass was used to check against a data group. The 11.x web based irule editor accepted the irules however when traffic came through the irules broke without outputing any details to ltm log. - nitasshowever when traffic came through the irules broke without outputing any details to ltm log.how did you know if traffic was broken because of irule?
- Sheigh_65772
Just closing out this question, I had forgotten about it. The issue with the missing logs was my fault. I had been experimenting with the HSL logging and had it configured to send those logs off box.