Forum Discussion

Vaughn_96017's avatar
Vaughn_96017
Icon for Nimbostratus rankNimbostratus
Dec 13, 2007

LTM in my raw logs

I am currently running GET / HTTP/1.1 in a custom monitor against all my Apache and Iplanet web heads. The problem I am running into is this is the F5 checks in my raw logs;

 

[19/Nov/2007:00:04:37 -0500] "GET /" 200 9 "-" "-" "-"

 

 

Not a problem right? The problem is Urchin is counting these as customer hits every 20 seconds. I tried creating custom filters for Urchin with no success.

 

 

My question is there a way to monitor port 80 without the F5 throwing a GET / at the web servers?

 

 

Leave the "send string" field empty?

 

 

Some other type of string besides GET /?

 

 

Thanks so much.
management
monitoring
  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Dec 14, 2007
    you could use the tcp_half_open or the tcp monitor instead against port 80
  • Vaughn_96017's avatar
    Vaughn_96017
    Icon for Nimbostratus rankNimbostratus
    Dec 17, 2007
    Awesome, I just ran some test with the tcp monitor and everything looks good. Failed a web server in the pool and it picked it up and no GET / in the logs.

     

     

    Thanks so much.
  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Dec 17, 2007
    No problem. This may not be the case with all apps, though. We have some sockets applications that log every tcp attempt, so we had to code in the tcp poll from the F5. We send a string to the app and we expect a certain string back from the app, and the app knows not to log these connections.