For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dan_19334's avatar
dan_19334
Icon for Nimbostratus rankNimbostratus
Sep 22, 2008

Syslog off box via TCP and stop writing to disk

We would like to remote syslog off the LTM via TCP for guaranteed delivery and also prevent the messages from writing to disk. In order to get TCP versus UDP we stream the logs through the local sysl...
config
design
suprety_83882's avatar
suprety_83882
Icon for Nimbostratus rankNimbostratus
Jan 31, 2011
I followed the article outlined above. But I am not able to override the default destination of log message. It is always written to disk. Here is my include file

 

 

 

 

 

 

syslog include "

 

weblog filter Log WebLog to remote server

 

filter f_weblog {

 

facility(local4) and level(debug..emerg) and match(\"WEBLOG\");

 

};

 

destination d_weblog {

 

udp(\"192.168.0.68\" port (19999));

 

 

};

 

log {

 

source(local);

 

filter(f_weblog);

 

destination(d_weblog);

 

};

 

 

 

 

 

filter f_no_weblog {

 

not match(\"WEBLOG\");

 

};

 

 

 

local4.*/var/log/ltm

 

filter f_local4 {

 

facility(local4);

 

};

 

 

 

log {

 

source(s_syslog_pipe);

 

filter(f_local4);

 

filter(f_no_weblog);

 

destination(d_ltm);

 

};

 

 

 

"

 

 

 

 

Any help would be greatly appreciated.