remote SYSlog setup

Hello  ,

Regarding your questions:

• If I want to dedicate to a specific drive on a server with multiple drive, is there a way to set it up accordingly?

I believe this depends on how the drive was setup and mount on the remote system. The configuration on BIG-IP can only direct the log to a certain server IP(s), but not a specific drive.

• This syslog for system logs. Do I need to add a publisher profile on each virtual server still?

Setting up a remote syslog server (syslog-ng) as described in K13080 does not require a publisher to be configured as you would do with the remote High-Speed Logging (HSL).

• Do I get logs locally and remote or this has to be setup?

No setup needed, configuring a new remote syslog server does not disable the local logging settings.

• if local logs won't show after adding the remote syslog, how can I set it up to get logs locally and remotely?

The log should still be generated locally even the remote server setting doesn’t work. For additional troubleshooting, refer to K86480148.

And regarding the local IP - It is optional, and there are some additional information in K86480148 for your reference: “If the local IP setting has an IP address configured, the BIG-IP system will only send log messages from the interface to which the IP address is assigned and ignore routes that use other interfaces, even if a destination is a closer match.”

Hope it helps! And if you have encountered unexpected behavior or need any further assistance during the setup, please feel free to contact us:

K2633: Instructions for submitting a support case to F5

K135: Information required when opening a support case for BIG-IP LTM, AFM, DNS, Link Controller, and PEM