For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MustphaBassim's avatar
MustphaBassim
Icon for Cirrus rankCirrus
Apr 13, 2024

syslog server connection

Hello Dears i want to make the F5 device send log (local traffic log) sent to syslog server it is now send only for mangment but the traffic that pass virtual servers is not send to syslog server an...
application delivery
Teerarat's avatar
Teerarat
Icon for Cirrostratus rankCirrostratus
Apr 22, 2024

Hello Mustphabassim,

  1. You have to create pool for high speed logging
  2. create irule logs client ip, virtual server ip, server, etc ... mapping with high speed logs pool
  3. applied this irules to virtual server

 

  • MustphaBassim's avatar
    MustphaBassim
    Icon for Cirrus rankCirrus
    Apr 22, 2024

    Hello Dear

    what do mean by high speed logs pool ? and do have an idea about this irule since i tried many irules but no like for that

    Bests

    • Teerarat's avatar
      Teerarat
      Icon for Cirrostratus rankCirrostratus
      Apr 22, 2024

      Hi Mustphabassim,

      Yes, its's HSL Pool, Please try step below,

      Step1 Create Syslog Pool

      Step2 Create this irule below

      when CLIENT_ACCEPTED

      { set hsl [HSL::open -proto UDP -pool syslog_server_pool]

      }

      HTTP_REQUEST {

      HSL::send $hsl "<190> [IP::client_addr]:[TCP::client_port]->[IP::local_addr]:[TCP::local_port]; [HTTP::host][HTTP::uri]"

      }

      Step3 Apply to virtual server