Forum Discussion

Nimbostratus

Apr 16, 2019

Send /var/log/ltm on syslog destination without AUDIT logs

Hello everyone, I'm trying to filter just /var/log/ltm logs in F5 version 13.1.1.4, but with my configuration I can't filter the AUDIT logs, is still sending it to my syslog destination. I config...

application delivery

LTM

TMSH

AMiles_377865
Apr 16, 2019
Hello Berenice,

You're on the right track; your syntax is just a little off. Match now requires the use of "value()"

So I think something like

filter no_audit { not match ( value=("AUDIT") ); };

Reference: Syslog Guide 3.0

Best of luck,

Austin