For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Craigus_200691's avatar
Craigus_200691
Icon for Nimbostratus rankNimbostratus
Aug 05, 2015

Remote Syslog Level Filter.

Hi,

 

I am wanting to set up my BIGIP 2000 units to remote log to our syslog server, but only log Notice , Warning and Emergency.

 

I have found a guide that I will be able to use but I am unsure of the syntax using the tmsh for filtering :

 

include " filter f_remote_loghost { level(warn,emerg,notice); - This line I am unsure of };

 

destination d_remote_loghost { tcp(\"10.11.16.253\" port(1468)); udp(\"10.11.16.252\" port(514)); };

 

log { source(s_syslog_pipe); filter(f_remote_loghost); destination(d_remote_loghost); }; "

 

can someone please sanity check the above and make sure the syntax is correct to only log warning, emergency and notice.

 

Thanks

 

No RepliesBe the first to reply