Forum Discussion
aj1
Nimbostratus
NimbostratusSend LTM logs to a VIP on the same BIG-IP
We haven't tried this yet but would like to know if it's possible and/or if this has been a setup in any environment. We plan to have an ELK cluster behind our LTMs, three or more nodes bound to a virtual server, and eventually every log source pointing to the virtual. Can the BIG-IP send its logs to this virtual? Hence load-balancing them across nodes that are behind the same BIG-IP.
Would appreciate any input. Thank you.
Brad_ParkerCirrus
No need to send it to that VIP even. You can use High Speed Logging to send it directly to your pool of ELK servers.
aj1Brad, thank you for the prompt reply. We can do that but currently syslog-ng is being used for remote-logging. And the requirement for the ELK setup is that everything should point to the VIP (even the BIG-IP), and not the nodes.
Brad_Parker_139Nacreous
No need to send it to that VIP even. You can use High Speed Logging to send it directly to your pool of ELK servers.
- aj1Brad, thank you for the prompt reply. We can do that but currently syslog-ng is being used for remote-logging. And the requirement for the ELK setup is that everything should point to the VIP (even the BIG-IP), and not the nodes.