Forum Discussion
Nimbostratususing f5 as Syslog target
Greetings: Has anyone used f5 as syslog target to be load balance between two syslog servers at the backend.
So far, has configured a virtual listening on 514 using Performance layer4 and configured backend syslog servers. Though the backend servers are catching the syslog feeds - 1) the IP stamp is the f5's floating IP and second 2) additional timestamp is added to the feed.
The idea is syslog feeds should reach backend syslog server un-preturbed with the source info intact.
Thanks in advance,
2 Replies
Seth_CooperEmployee
To address issue 1 you need to disable SNAT.
For 2 can you show me what you see and what you expect to see?
-Seth
Brad_ParkerCirrus
As Seth said, you should disable SNAT. Also, you should consider using a stateless virtual server rather than the performance L4. You may get a little better performance through the LTM.
https://support.f5.com/kb/en-us/solutions/public/13000/600/sol13675.html
