For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Nail's avatar
Kevin_Nail
Icon for Nimbostratus rankNimbostratus
Sep 17, 2007

syslog-ng and centralized logging

We are trying to find a way to send syslog from the servers behind bigip to a central log server and distinguish what host the message came from. Is there any way to do this?     Will creating ...
config
design
Deb_Allen_18's avatar
Deb_Allen_18
Historic F5 Account
Sep 17, 2007
Hi Kevin --

 

 

With a default SNAT in place, the traffic through a forwarding VS would be SNAT'd.

 

 

If your server addresses are routable out to the remote syslog server, and UDP is the transport protocol, I think you could configure as follows to preserve source IP even with a default SNAT configured:

 

 

Virtual server

 

- Dest: :514

 

- Type: Standard

 

- Proto: UDP

 

- VLAN: Enable on

 

- Address translation: Enabled

 

 

Pool

 

- Members: :514

 

- Allow SNAT: No

 

 

HTH

 

/deb