Forum Discussion

Jay_46829's avatar
Jay_46829
Icon for Nimbostratus rankNimbostratus
May 28, 2007

Syslog Problems

I have been troubleshooting a syslog problem I have been having with the BIGIP load balancer. The remote syslog server is not receiving any messages from the load balancer. I have used tcpdump port 514 on both local and remote and have not see any traffic. "local0" is logging to the local machine in /var/log/bigip. I tested local0 logging by going into the web interface and adding a snmp managment ip, then removing it. Listed in the bigip log file was an entry saying that the snmp service restarted. Any suggestions on steps I can take to further troubleshoot this?

 

 

- Jay

 

 

 

Configuration

 

syslog.conf entry

 

local0.* @loghost

 

local0.* /var/log/bigip

 

 

hosts file

 

192.168.104.10 @loghost

 

 

  • After further reading I started syslog in debug mode, but sadly dont see what I am looking for. Looks like it is only logging local items.
  • You should call F5 support on this one and glance at the manual and AskF5 to help you get syslog configured.
  • I figured it out. I put syslog into debug state and I noticed that the line pointing to the syslog server did not show up. I then viewed the /etc/hosts file and noticed that I had @loghost when I should have just had loghost. Anyways, thanks for the suggestion.