For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mbjelo's avatar
mbjelo
Icon for Nimbostratus rankNimbostratus
Jul 05, 2018

Question about LTM logging

Hi F5 support,

 

I have one question regarding ltm logging. I created log profile from Local traffic->Profiles->Other->Request Logging and applied that profile to one of my virtual servers. I have one simple question : Where I can read logs logged with profile I created, where logs are stored and how I can read it? :)

 

3 Replies

  • HTTP request logs are sent to a log server, you can configure a pool with one or more syslog servers and then select it in the request logging profile (Request Settings > Pool Name). You could do tests using a local syslog server such as "kiwi syslog server free edition" or "visual syslog server"

     

  • If you don't want to ship them off the box, you can SSH to the BigIP, and look under the /var/log/ltm folder.

     

    I usually tail the log to see new entries. tail -F /var/log/ltm

     

  • There are two methods:

     

    1. You can send logs to Syslog servers, eg: Splunk, Kiwi etc..

       

    2. You can view logs on device it self

       

    Go to cd /var/log/ and use any below command as per requirement.

     

    tail -f ltm | grep tail -f ltm | grep tail -f ltm