Forum Discussion
bodnarmatic_110
Nimbostratus
Nov 17, 2009LTM Local Logging Question
We've written a throttling iRule that parses URIs and occasionally rejects requests based on volume, content and other conditions. That part works well.
We'd like to be able to log som...
Randy_Johnson_1
Nimbostratus
Dec 14, 2009This is EXACTLY what I'm looking for.Wish I could get it to work
Here is what I'm using...
when HTTP_REQUEST {
set http_request_time [clock clicks -milliseconds]
set request_log_line "\
[HTTP::request_num],\
[IP::remote_addr],\
[HTTP::method],\
[HTTP::version],\
[HTTP::host],\
[LB::server],\
\"[HTTP::uri]\",\
\"[HTTP::header value Referer]\",
\"[HTTP::header User-Agent]\",\
\"[HTTP::cookie value JSESSIONID]\",\
[SSL::cipher name],\
[SSL::cipher version],\
[SSL::cipher bits]"
}
when HTTP_RESPONSE {
set http_response_time [ clock clicks -milliseconds ]
log 10.1.3.31 local0.info "$request_log_line,\
[HTTP::status],\
[HTTP::payload length],\
[expr $http_response_time - $http_request_time]"
}
I use the same rule to log to the local syslog on my BigIP (log local0. "$request_log_line,\) and it works flawlessly.
However, when trying to log to the remote box 10.1.3.31 (Using the KIWI Syslog Daemon from Solarwinds) I get nothing. Sniffing with WireShark, I don't see anything coming from my BigIP.
Any comments or thoughts are MOST welcome !!
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects