Forum Discussion
syslog config on Big IP 6900 10.2.4
Hello, I am trying to find the command to send the logs from F5 to local Syslog server in our organization , we need to send alerts in case any node goes down . thanks for help
11 Replies
- Mar_Kus_64551
Nimbostratus
Hi Amit, For bigpipe (should still be there in 10.2.4, I guess...) bigpipe syslog remote server { syslog-name {host local ip } }
Set the syslog server via tmsh modify sys syslog remote-servers add { syslog-name { host local-ip } }
- amit_128525
Nimbostratus
thanks Mar , So I have to use one of the two option right ? 1) bigpipe syslog remote server { syslog-name {host local ip } }
2)Set the syslog server via tmsh modify sys syslog remote-servers add { syslog-name { host local-ip } }
- Mar_Kus_64551
Nimbostratus
Hi Amit,
Yes - just one of these (I'd go with the tmsh one, as bigpipe will be gone if you upgrade to 11.x ;-) )
don't forget to do a "tmsh save sys config" afterwards to save your configuration to disc.
Best Regards, Markus
- amit_128525
Nimbostratus
It gives me below error , when I try to enter command bigpipe syslog remote server 10.1.1.1bigpipe syslog remote server 10.1.1.1 BIGpipe parsing error: 012e0022:3: The requested value (10.1.1.1) is invalid (show | | none) [add | delete]) for 'remote server' in 'syslog'
- Mar_Kus_64551
Nimbostratus
unfortunately, I do not have a 10.2.4 machine to test this by myself available... why don't you just go with the tmsh command? it should be working and if there is any trouble, try to hit the TAB key. This should give you a hint what is wrong.
- amit_128525
Nimbostratus
when i try to use " tmsh modify sys syslog remote-servers add { server1.net { host 10.7.1.1 } } " using tab when i enter tmsh m it doesnt give me modify option , below is output config tmsh monitors/
- Mar_Kus_64551
Nimbostratus
Hi Amit,
I just see that the devcentral seems to cut my commands, that I sent to you...
modify sys syslog remote-servers add { syslog-name { host local-ip } }
Does it work like this?
- Mar_Kus_64551
Nimbostratus
modify sys syslog remote-servers add { syslog-name { host "syslog-ip-address" local-ip "ip-of-LB-from-which-it-sends" } }
- amit_128525
Nimbostratus
hello Thanks I am able to run tmsh command now , below output shows the syslog server added is there any other check i need to do to check if logs are gettibng sent config bigpipe syslog list all syslog { authpriv from notice authpriv to emerg cron from warning cron to emerg daemon from notice daemon to emerg include none kern from notice kern to emerg mail from notice mail to emerg messages from notice messages to warning userlog from notice userlog to emerg remote server server1.net { host 10.7.1.1 local ip none remote port 514 } }
- nathe
Cirrocumulus
amit,
at tmsh prompt just type:
modify sys syslog remote-servers add { server1.net { host 10.7.1.1 } }this should work.
As for the bigpipe command, try:
bigpipe syslog remote server {server1.net {host 10.7.1.1}}I haven't got a 10.x lab to test at the mo though.
Hope this helps, N
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com