For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ben_Kennedy_502's avatar
Ben_Kennedy_502
Icon for Nimbostratus rankNimbostratus
Apr 24, 2014

Syslog include configuration sync

Is there anyway in v11 (currently running 11.3.0) to not sync the syslog include section (in bigip_base.conf) between members of a Sync group? We use the syslog include section to insert the hostname...
application delivery
LTM
management
nitass's avatar
nitass
Icon for Employee rankEmployee
Apr 24, 2014

this is my testing. i am running 11.5.1.

 /usr/share/defaults/config_base.conf

...snipped...
include {
   appdata unix_config_syslog.replace.include
   class-name syslog
   configsyncd no
   display-name "Include Data"
   type string
}
...snipped...

 unit1

root@(ve11a)(cfg-sync In Sync)(Standby)(/Common)(tmos) show cm sync-status

------------------------------------------------------------------------------------------
CM::Sync Status
------------------------------------------------------------------------------------------
Color    green
Status   In Sync
Summary  All devices in the device group are in sync
Details
         /Common/ve11b.acme.local: connected (for 445 seconds)
         /Common/ve11c.acme.local: connected (for 439 seconds)
         /Common/device_trust_group (In Sync): All devices in the device group are in sync
         /Common/dg (In Sync): All devices in the device group are in sync

root@(ve11a)(cfg-sync In Sync)(Standby)(/Common)(tmos)

root@(ve11a)(cfg-sync In Sync)(Standby)(/Common)(tmos) list sys syslog
sys syslog {
    include "
destination d_loghost {
       udp(\"172.28.24.1\" port(514));
};
log {
       source(s_syslog_pipe);
          destination(d_loghost);
};
"
}

 unit2

root@(ve11b)(cfg-sync In Sync)(Active)(/Common)(tmos) list sys syslog
sys syslog { }
root@(ve11b)(cfg-sync In Sync)(Active)(/Common)(tmos)