For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dan_19334's avatar
dan_19334
Icon for Nimbostratus rankNimbostratus
Sep 22, 2008

Syslog off box via TCP and stop writing to disk

We would like to remote syslog off the LTM via TCP for guaranteed delivery and also prevent the messages from writing to disk. In order to get TCP versus UDP we stream the logs through the local sysl...
config
design
Ed_Hammond_2611's avatar
Ed_Hammond_2611
Icon for Nimbostratus rankNimbostratus
Sep 26, 2008
You need to add the exclusion rules to the syslog-ng.conf file on the LTM lines. For example: 

filter f_local0 { 
    facility(local0) and level(info..emerg) and not match(": Rule ") ; 
 }; 
  
 destination d_ltm { 
    file("/var/log/ltm" create_dirs(yes)); 
 }; 
  
 log { 
    source(local); 
    filter(f_local0); 
    destination(d_ltm); 
 };

Note the and not match(": Rule ") is what you need.