Forum Discussion

malikjengineer_'s avatar
malikjengineer_
Icon for Nimbostratus rankNimbostratus
Feb 06, 2018

prioritize syslog server list

Is there any documentation to support whether or not re-ordering the syslog server list have any effect on hitting or maintaining web log traffic from the BIG-IP to the first server on the list?

 

Since we are only monitoring these servers with UDP, if one of them is down, the BIG-IP has no way of knowing, so it will direct log traffic towards it.

 

As to any configuration to the syslog server, it is not setup with any ICMP monitoring from the (syslog server) appliance to a client device. only monitor receiving logs.

 

Could I configure an ICMP test from the device reaching to the appliance since the appliance will respond to ICMP if the path is clear?

 

application delivery
BIG-IP
LTM
  • Amy003_314955's avatar
    Amy003_314955
    Feb 06, 2018

    You have the option of adding multiple syslog servers, in which case, F5 would send logs to all of them. If one of them goes down, the other one should still be able to receive the logs. There is no visible option to prioritize the syslog server.

     

  • Amresh008's avatar
    Amresh008
    Icon for Nimbostratus rankNimbostratus
    Feb 06, 2018

    You have the option of adding multiple syslog servers, in which case, F5 would send logs to all of them. If one of them goes down, the other one should still be able to receive the logs. There is no visible option to prioritize the syslog server.

     

  • Amresh008's avatar
    Amresh008
    Icon for Nimbostratus rankNimbostratus
    Feb 06, 2018

    You have the option of adding multiple syslog servers, in which case, F5 would send logs to all of them. If one of them goes down, the other one should still be able to receive the logs. There is no visible option to prioritize the syslog server.

     

  • Amy003_314955's avatar
    Amy003_314955
    Icon for Cirrus rankCirrus
    Feb 06, 2018

    You have the option of adding multiple syslog servers, in which case, F5 would send logs to all of them. If one of them goes down, the other one should still be able to receive the logs. There is no visible option to prioritize the syslog server.