Remote syslog

Question

Dear all,&nbsp;&nbsp;
&nbsp;  Can somebody help me that how can configure or use irules to remote syslog logging? it is works that only logging in the bigip&nbsp;
&nbsp;what i need to config if i need remote syslog logging?&nbsp;
&nbsp;Many thanks ~

jason_roppolo_3 · Answer

Hi!&nbsp;
&nbsp;Under /etc/syslog-ng/syslog-ng.conf&nbsp;
&nbsp;You need to modify the configuration where it says:&nbsp;&nbsp;&nbsp;
&nbsp;destination d_ltm {   
&nbsp;   file("/var/log/ltm" create_dirs(yes));&nbsp;
&nbsp;to something like:&nbsp;
&nbsp;destination d_ltm { 
&nbsp;    udp("x.x.x.x");  
&nbsp;   file("/var/log/ltm" create_dirs(yes));&nbsp;
&nbsp;This is assuming that what you are looking for is logging to var/log/ltm&nbsp;
&nbsp;Once you make the change you need to do a bigstart restart syslog&nbsp;
&nbsp;I would be careful doing this on a production system!&nbsp;
&nbsp;-J&nbsp;

abeny_894 · Answer

MANY THANKS~ IT WORKS~

Forum Discussion

Remote syslog

Recent Discussions

Creating virtual server of type performance_fastl4 using rest call

Installing a PKCS 12 File onto an F5 Device

Using the WAF instead of a jump server for ssh-tunneling?

APM webtop customization header message

Irule to allow specific IPs

Related Content

remote SYSlog setup

BIG-IP syslog include

F5 Sending syslogs with two hostname to remote syslog server

Integrate F5 Distributed Cloud remote logging with ELK

LTM 9.4.2+: Custom Syslog Configuration