For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

cjbarr1234's avatar
cjbarr1234
Icon for Altostratus rankAltostratus
Jan 22, 2015

Request Logging Profile: Profile not writing to LogIQ

Hello,

 

I am having a very difficult time getting the Request Logging Template to write to the logs. My current template is:

 

REQUEST SETTINGS:

 

Request Logging: Enabled

 

TEMPLATE:

 

$DATE_YYY-$DATE_MM-DATE_DD $TIME_HMS SOURCE $CLIENT_IP:$CLIENT_PORT METHOD:$HTTP_METHOD REQUEST: $HOST $HTTP_URI $HTTP_PATH $HTTP_REQUEST $HTTP_STATCODE

 

HSL Protocol: TCP Pool Name: EM-Index-Cluster

 

RESPONSE SETTINGS:

 

RESPONSE: ENABLED

 

TEMPLATE:

 

RESPONSE:$RESPONSE_SIZE $RESPONSE_MSECS $REFERER ${User-agent}

 

5 Replies

  • The Date Year argument is actually: $DATE_YY sorry for the confusion.
  • What's the question exactly? Are the logs just not making it to your syslog server?
  • Hey Brad - I'm questioning my profile I built. The logs are not triggering any events to the syslog server. I did create a test log filter for debug and I see events being written, but after removing the test log filter nothing writes to my index cluster.
  • Hi cj,

     

    Not sure if you ever get your issue resolved. I am facing a similar problem where the request logging profile configured for a VS does not seem to capture traffic. Th estrange thing is that on a different device, the same configuration works (destination is different.) Any hints how to troubleshoot request logging profile would be much appreciated.