Forum Discussion

Nath's avatar
Nath
Icon for Cirrostratus rankCirrostratus
Jan 23, 2023

Sending syslogs and ltm logs to BIGIQ DCD

Has anyone tried sending syslogs and LTM logs from BIGIP to DCD?

I am exploring the BIG-IQ and DCD and trying to figure out this kind of setup.

  • Nath It seems like a configuration conflict with what is on the BIG-IQ doesn't match what is on the BIG-IP or possibly the other way around. These types of errors have occurred for me when a profile existed on the BIG-IQ and I synced the configuration to the BIG-IP with the checkbox something along the lines of "Delete Unused Objects" so the BIG-IQ was issuing a delete of the profile it had but the BIG-IP didn't have so it errored out. You might see if something like that exists when you are attempted to perform the discovery.

  • Nath Sadly I have only had the opportunity to configure a BIG-IQ CM but I have looked into the DCD piece and it seems fairly straight forward to point to the DCDs that you want to collect this data. What is the issue that you are encountering when setting this up? Or are you wanting to know just general pieces that need to be configure to send syslog to DCD?

    • Nath's avatar
      Nath
      Icon for Cirrostratus rankCirrostratus

      I'm trying to send Syslog to DCD and I did this using Remote HSL. However, when remote HSL is configured in BIGIP I'm getting errors whenever I'm doing device discovery and import(see below).

      Also in which part of BIG-IQ I can see the syslogs that BIGIP is sending?

      • Nath It seems like a configuration conflict with what is on the BIG-IQ doesn't match what is on the BIG-IP or possibly the other way around. These types of errors have occurred for me when a profile existed on the BIG-IQ and I synced the configuration to the BIG-IP with the checkbox something along the lines of "Delete Unused Objects" so the BIG-IQ was issuing a delete of the profile it had but the BIG-IP didn't have so it errored out. You might see if something like that exists when you are attempted to perform the discovery.