F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Dineshsankar_31's avatar
Dineshsankar_31
Icon for Altostratus rankAltostratus
Oct 15, 2017

VIP down alerts

How to find VIP went down on which time or server behind the pool went down. Through CLI and GUI   How many days loggs will be saved in LB  
application delivery
BIG-IP
Simon_Blakely's avatar
Simon_Blakely
Icon for Employee rankEmployee
Oct 15, 2017

By default, the LTM tries to retain logs for 10 days.

K13367: Managing log files on the BIG-IP system (11.x - 13.x)

Increasing the log options from default or adding irule logging may impact the ability of the LTM to retain the default logs. If additional log levels or longer retention is required, then configuring HSL or a remote syslog server is recommended.

Within the ltm log file in /var/log/ltm, pool member and virtual server state changes are recorded with messages such as

notice mcpd[5261]: 01070638:5: Pool /Common/my_http_pool member /Common/10.0.0.145:80 monitor status down. [ /Common/http: down; last error: ] [ was up for 502hrs:48mins:43sec ]

notice mcpd[5261]: 01071682:5: SNMP_TRAP: Virtual /Common/my_https_vs has become unavailable

You can use zgrep to search for these events in the ltm log files

 zgrep "has become unavailable" /var/log/ltm*

ltm: notice mcpd[5261]: 01071682:5: SNMP_TRAP: Virtual /Common/my_https_vs has become unavailable