Forum Discussion

ghost-rider_124's avatar
ghost-rider_124
Icon for Nimbostratus rankNimbostratus
Dec 22, 2014

LTM logs to external syslog (Splunk)

Hello Experts   I want to send LTM logs to syslog server. When I configure syslog server then by default what logs of LTM will be send to syslog? I want below, should I need to write an IRULE for ...
application delivery
deployment
LTM
MR_RJ's avatar
MR_RJ
Icon for Cirrus rankCirrus
Jan 28, 2015

Just configure (/Common)(tmos.sys) edit /sys syslog all-properties

Go to the line that says "include none" and replace that line with:

include "
destination remote_server {
    udp(\"IP-OF-SYSLOG-SERVER\" port (514));
};
filter f_ltm {
    facility(local0) and level(emerg..info); }; log {
    source(local);
    filter(f_ltm);
    destination(remote_server);
};
"