Forum Discussion

MustphaBassim's avatar
MustphaBassim
Icon for Cirrus rankCirrus
Apr 13, 2024

syslog server connection

Hello Dears

i want to make the F5 device send log (local traffic log) sent to syslog server it is now send only for mangment but the traffic that pass virtual servers is not send to syslog server anyone can help plz?

 

Best Regards 

application delivery
  • Teerarat's avatar
    Teerarat
    Icon for Cirrus rankCirrus
    Apr 22, 2024

    Hello Mustphabassim,

    1. You have to create pool for high speed logging
    2. create irule logs client ip, virtual server ip, server, etc ... mapping with high speed logs pool
    3. applied this irules to virtual server

     

    • MustphaBassim's avatar
      MustphaBassim
      Icon for Cirrus rankCirrus
      Apr 22, 2024

      Hello Dear

      what do mean by high speed logs pool ? and do have an idea about this irule since i tried many irules but no like for that

      Bests

      • Teerarat's avatar
        Teerarat
        Icon for Cirrus rankCirrus
        Apr 22, 2024

        Hi Mustphabassim,

        Yes, its's HSL Pool, Please try step below,

        Step1 Create Syslog Pool

        Step2 Create this irule below

        when CLIENT_ACCEPTED

        { set hsl [HSL::open -proto UDP -pool syslog_server_pool]

        }

        HTTP_REQUEST {

        HSL::send $hsl "<190> [IP::client_addr]:[TCP::client_port]->[IP::local_addr]:[TCP::local_port]; [HTTP::host][HTTP::uri]"

        }

        Step3 Apply to virtual server