For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Gill_32697's avatar
Gill_32697
Icon for Nimbostratus rankNimbostratus
Mar 10, 2016

Not getting failover messages sent to remote syslog server

We have been testing remote syslog i have done the usual tmos shell commands and also suppress sending SSL access to remote syslog. i have a filter f_custom to match Pool or Virtual. I really would like to see Failover and Failsafe type messages sent to the remote syslog. For that matter id like to see critical core messages like, Fan, Temperature, Interface these type of things sent to the remote syslog....Im including my script, I would appreciate any help. ! sys syslog { auth-priv-from info auth-priv-to emerg console-log enabled cron-from warning cron-to emerg daemon-from notice daemon-to emerg description none include " filter f_custom { (level(notice) and match(\"Pool /Common/\") or match (\"Virtual /Common/\")) or level(warning..emerg) ; };

 

filter f_remote_loghost { level(debug..emerg) and not (facility(local6) and level(info) and match('[ssl_acc\]')) and not (facility(local6) and level(info) and match('[ssl_req\]')); };

 

destination d_loghost { udp(\"10.240.240.47\" port(514)); udp(\"10.234.52.150\" port(514)); }; log { source(s_syslog_pipe); filter(f_custom); destination(d_loghost); };" iso-date disabled kern-from notice kern-to emerg local6-from notice local6-to emerg mail-from notice mail-to emerg messages-from notice messages-to warning remote-servers none user-log-from notice user-log-to emerg }

 

No RepliesBe the first to reply