Remote syslog server

I deal with the repetitive syslog messages in the Kiwi syslog server. Create a rule that filters based on the IPs of the f5 devices AND unique text strings of the repetitive messages (you can stack up filters and actions in Kiwi), with an action that stops message processing. Example:

filter = Message text "POST iControl/iControlPortal.cgi" OR "pam_unix(crond:session)"

filter = Hostname "10.150.0.10" OR "10.150.0.11" OR "10.150.0.12" OR "10.150.0.13" OR "10.150.0.14"

action = Stop message processing

Place this rule near the top of the list (order matters in Kiwi). It will drop the useless stuff, and allow the meaningful messages to pass through to be parsed, logged/emailed/whatever. Hope this helps.