Forum Discussion

bortega_340015's avatar
bortega_340015
Icon for Nimbostratus rankNimbostratus
Apr 16, 2019
Solved

Send /var/log/ltm on syslog destination without AUDIT logs

Hello everyone, I'm trying to filter just /var/log/ltm logs in F5 version 13.1.1.4, but with my configuration I can't filter the AUDIT logs, is still sending it to my syslog destination. I config...
  • AMiles_377865's avatar
    Apr 16, 2019

    Hello Berenice,

    You're on the right track; your syntax is just a little off. Match now requires the use of "value()"

    So I think something like

    filter no_audit { not match ( value=("AUDIT") );    };
    

    Reference: Syslog Guide 3.0

    Best of luck,

    Austin