For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Luca_55898's avatar
Luca_55898
Icon for Nimbostratus rankNimbostratus
Jul 08, 2011

Syslog errors only

My LTM are nailing my syslog server with so much stuff it makes that it is drowning out any imporant stuff.     How can i configure my LTM (version 10) to only send errors to the syslog server? ...
management
monitoring
dubdub's avatar
dubdub
Icon for Nimbostratus rankNimbostratus
Jul 08, 2011
It's pretty straightforward - create a file (/tmp/new_syslog.conf in this example; change "warn" to a different level if you want something else):

 

 

syslog include "

 

destination remote_server {

 

udp(\"x.x.x.x\" port (514));

 

};

 

filter f_alllogs { level (warn...emerg);

 

};

 

log { source(local);

 

filter(f_alllogs);

 

destination(remote_server);

 

};"

 

 

Then run:

 

 

bpsh < /tmp/new_syslog.conf

 

 

Save it when you're done testing:

 

 

b save

 

 

Jen