Forum Discussion

ghost-rider_124's avatar
ghost-rider_124
Icon for Nimbostratus rankNimbostratus
Dec 22, 2014

LTM logs to external syslog (Splunk)

Hello Experts   I want to send LTM logs to syslog server. When I configure syslog server then by default what logs of LTM will be send to syslog? I want below, should I need to write an IRULE for ...
application delivery
deployment
LTM
ghost-rider_124's avatar
ghost-rider_124
Icon for Nimbostratus rankNimbostratus
Dec 23, 2014

Thanks a lot. So If I configure syslog under under system -> logging then /var/log/ltm by default will go to syslog server?

 

  • cdougall_14195's avatar
    cdougall_14195
    Icon for Cirrus rankCirrus
    Dec 23, 2014
    yep. That's correct. There's quite a bit that will get sent to the syslog server once you get that set up. Below are the docs for setting up the remote syslog, as well as how to filter it. Hope this helps. https://support.f5.com/kb/en-us/solutions/public/13000/000/sol13080.html?sr=42612466 https://support.f5.com/kb/en-us/solutions/public/13000/300/sol13333.html
  • ghost-rider_124's avatar
    ghost-rider_124
    Icon for Nimbostratus rankNimbostratus
    Dec 24, 2014
    Can you please help me. I want to send only LTM and Audit Logs (admin activities) to remote syslog server. How I can filter the syslog setting. Appreciated your reply