For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Aj2's avatar
Aj2
Icon for Altostratus rankAltostratus
Apr 27, 2022

LTM request logging

We want to create a request logging profile in F5 to find out whether transactions/HTTPS requests are made toward pool members or not? The application team suspects transaction failed/timeout at the...
event
LTM
request logging
neeeewbie's avatar
neeeewbie
Icon for MVP rankMVP
Apr 27, 2022

which part do you want to remain log ? 

request hearder or ip address ? 

Aj2's avatar
Aj2
Icon for Altostratus rankAltostratus
Apr 27, 2022

Hi 

thanks for reply 

mainly looking for requests header

but it would be great if you could give answer.

our aim is to identify whether or not request reach to end server or not or it is dying in f5 only.

Thanks 

Aj 

  • neeeewbie's avatar
    neeeewbie
    Icon for MVP rankMVP
    Apr 29, 2022

    yes, I think you would rather using tcpdump for just check packet

    and you have to configure ssl certtificate on virtual server  if you want to remain log 

    and then configure below irule

    when HTTP_REQUEST {
    set vip [IP::local_addr] set uri [HTTP::uri]

    log local0.info "Client [IP::client_addr]:[TCP::client_port] connected to VS ($vip)for URI $uri"
    }

    • Mayur_Sutare's avatar
      Mayur_Sutare
      Icon for MVP rankMVP
      May 01, 2022

      Hi Aj2 ,

      In addition to what neeeewbie has suggested, I would also recommend you to take captures on the backend servers. So you can verify the packets on the server side also during issue period.