Forum Discussion
al_kabeer_2905
Nimbostratus
Oct 23, 2012Monitor All BigIP Traffic
Hi, I have bigip 3600 ltm, i created VIP (layer 4) for two web servers,
i want to log all traffic (http), i have created syslog server i can only see traffic for syn, pool up/down, node up/down...
nitass
Employee
Oct 23, 2012I am network person, i usually type show logging or use netflow to collect data. Is there anything i can do to get the same.system log does not contain application traffic. there is sflow in 11.2.0.
Manual Chapter: Configuring Performance Monitoring
http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-implementations-11-2-0/23.htmlconceptid
IRule i tried i cannot insert Irule in l4 VIP since it needs http profile http log requires http profile (since it has to parse http header). if you want to log just ip and port, you can use tcp or udp log instead which does not require http profile.
Log Http Tcp Udp To Syslogng
https://devcentral.f5.com/wiki/iRules.LogHttpTcpUdpToSyslogng.ashx
for high volume of traffic, high speed logging is prefered (instead of log command).
High Speed Logging
https://devcentral.f5.com/wiki/irules.HSL.ashx
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects