For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

refra_151287's avatar
refra_151287
Icon for Cirrus rankCirrus
Jul 15, 2014

SYSLOG filter

Hi Gyus, I just configured syslog server at F5 device, but it gives me more much logs although i checked severity to be emergency, and also it doesn't provide me important information like interface down. so How could i manage syslog massages from gui?

 

application delivery
LTM
management

5 Replies

  • gsharri's avatar
    gsharri
    Icon for Altostratus rankAltostratus
    Jul 15, 2014

    While you have some control through System>Logs>Configuration you can't configure syslog filtering there. Syslog filters can only be managed using tmsh at the command line. See these articles:

     

    SOL13317

     

    SOL13333

     

  • gsharri's avatar
    gsharri
    Icon for Altostratus rankAltostratus
    Jul 16, 2014

    The log filter/publisher/destination configuration in the gui applies to HSL (high speed logging) which is implemented inside TMOS. HSL allows higher performance and lower overhead logging compared to calling the syslog process in Linux.

     

    The cli config (/sys syslog) applies to the Linux syslog process. Lookup high speed logging on askf5 for more info.

     

    S_syslog_pipe is a source definition for syslog-ng. It refers to a particular source for log msgs. What that source might be I'm not sure at the moment.

     

  • gsharri's avatar
    gsharri
    Icon for Altostratus rankAltostratus
    Jul 16, 2014

    The log filter/publisher/destination configuration in the gui applies to HSL (high speed logging) which is implemented inside TMOS. HSL allows higher performance and lower overhead logging compared to calling the syslog process in Linux.

     

    The cli config (/sys syslog) applies to the Linux syslog process. Lookup high speed logging on askf5 for more info.

     

    S_syslog_pipe is a source definition for syslog-ng. It refers to a particular source for log msgs. What that source might be I'm not sure at the moment.

     

  • gsharri's avatar
    gsharri
    Icon for Altostratus rankAltostratus
    Jul 16, 2014

    The log filter/publisher/destination configuration in the gui applies to HSL (high speed logging) which is implemented inside TMOS. HSL allows higher performance and lower overhead logging compared to calling the syslog process in Linux.

     

    The cli config (/sys syslog) applies to the Linux syslog process. Lookup high speed logging on askf5 for more info.

     

    S_syslog_pipe is a source definition for syslog-ng. It refers to a particular source for log msgs. What that source might be I'm not sure at the moment.

     

  • gsharri's avatar
    gsharri
    Icon for Altostratus rankAltostratus
    Jul 16, 2014

    The log filter/publisher/destination configuration in the gui applies to HSL (high speed logging) which is implemented inside TMOS. HSL allows higher performance and lower overhead logging compared to calling the syslog process in Linux.

     

    The cli config (/sys syslog) applies to the Linux syslog process. Lookup high speed logging on askf5 for more info.

     

    S_syslog_pipe is a source definition for syslog-ng. It refers to a particular source for log msgs. What that source might be I'm not sure at the moment.