For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

bigipjr28_13978's avatar
bigipjr28_13978
Icon for Nimbostratus rankNimbostratus
May 20, 2014

LTM/GTM logging

I was curious to see if adding more verbose logging will show more info in regards to the ltm/gtm devices that might be having issues. Is enhancing the verbosity of the /var/log/ltm, /var/log/gtm logs suggested at all ? what sort of impacted can this cause i.e system performance, disk space issues if any by increasing the verbosity ?

 

Thanks

 

4 Replies

    • bigipjr28_13978's avatar
      bigipjr28_13978
      Icon for Nimbostratus rankNimbostratus
      Just in general I guess. Is there away to get more info from that logs then what is generally shown ?
    • Cory_50405's avatar
      Cory_50405
      Icon for Noctilucent rankNoctilucent
      You can increase logging levels for various different things. Navigate to System -> Logs -> Configuration -> Options to see what LTM and GTM functions are currently logging and at what levels. Then you can modify them accordingly. It can also be done through tmsh: http://support.f5.com/kb/en-us/solutions/public/13000/300/sol13317.html
  • Syslog is generally configured to roll logs over after a point, so disk space shouldn't be an issue. The one thing you should consider though is that standard logging runs in a syslog service in the management plane, so passing doing a lot of logging from the data plane into the management plane can create performance issues. If you're going to be doing a lot of logging, use the HSL (high speed logging) process, which uses tmm to send remote syslog messages quickly. Now, as far as usefulness, that as Cory says, depends on what you're looking for. There are more than just LTM and GTM logs on any given platform, and a wealth of information that is either built-in or that can be configured.