For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Michael_Harpe's avatar
Michael_Harpe
Icon for Altostratus rankAltostratus
Apr 17, 2023

What is logged in /var/log/ecm on an F5 BIG-IP LTM

Environment is 16.1.3.2. Security people are asking for contents of /var/log/ecm trying to match it up to the contents of the same file on an Uplogix terminal server.  We don't see the same thing at...
application delivery
Enes_Afsin_Al's avatar
Enes_Afsin_Al
Icon for MVP rankMVP
Apr 18, 2023

Hi Michael,

I have not reviewed this file before.

ECM subsystem and Ant server specific messages are logged in ecm file.
REF: https://my.f5.com/manage/s/article/K15934495

ECM stands for Elastic Compute Manager and

  • It is used to orchestrate application deployments,
  • This is built on top of Kubernetes to provide a management layer for F5 applications.
  • ECM is responsible for adding removing cluster node and provide application life cycle.
  • The ECM platform is mainly based on Google Kubernetes.

REF: https://my.f5.com/manage/s/article/K09493232

The antserver process allows secure web gateway (SWG) to dynamically filter web content.
REF: https://my.f5.com/manage/s/article/K17346