Forum Discussion
Luca_55898
Nimbostratus
Jul 08, 2011Syslog errors only
My LTM are nailing my syslog server with so much stuff it makes that it is drowning out any imporant stuff.
How can i configure my LTM (version 10) to only send errors to the syslog server?
4 Replies
- dubdub
Nimbostratus
It's pretty straightforward - create a file (/tmp/new_syslog.conf in this example; change "warn" to a different level if you want something else):
syslog include "
destination remote_server {
udp(\"x.x.x.x\" port (514));
};
filter f_alllogs { level (warn...emerg);
};
log { source(local);
filter(f_alllogs);
destination(remote_server);
};"
Then run:
bpsh < /tmp/new_syslog.conf
Save it when you're done testing:
b save
Jen - Luca_55898
Nimbostratus
Thanks for the info...
I made the changes but am still seeing informational and debugging messages comming into my syslog:
[root@LB001:Active] config b syslog include
SYSLOG - Include Data:
destination remote_server {
udp("192.168.41.77" port (514));
};
filter f_alllogs {
level (warn...emerg);
};
log {
source(local);
filter(f_alllogs);
destination(remote_server);
};
Is there anything else i need? - dubdub
Nimbostratus
Sorry I didn't get back to this sooner, it got crazy for a bit. That's the same include file I use on all my LTMs (v10.1 or higher) and I don't see any info/debug messages in my syslog, so unfortunatley I have no idea why it's not working... Probably worth opening a case with support about it?
Thanks,
Jen - Pristavkara_734
Nimbostratus
Thanks she not laying yet any day now. Thanks for the info
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects