For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Zuke_254875's avatar
Zuke_254875
Icon for Altostratus rankAltostratus
Apr 23, 2019

What /var/log/ are sent to remote syslog?

First, we don't have HSL enabled (yet). Following an upgrade from 12.1.2 to 13.1.1.4, I ran into an issue where a guest went offline due to Bug ID 724556; processes are issued the kill command but...
application delivery
BIG-IP
logging
restjavad
varlog
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Apr 23, 2019

Hi,

I don't think so.

I check syslog config directly in the file:

vi /etc/syslog-ng/syslog-ng.conf

And it seems that /var/log/restjavad.0.log was not send trough syslog.

however what I find strange, in the following link F5 tells us that we can send this logs using syslog. but the procedure is not indicated:

https://f5-automation-labs-dev.readthedocs.io/en/develop/class1/module1/module1.html?highlight=restjavad

In order to confirm the results of REST API calls made in this lab, it’s recommended to keep GUI/SSH sessions to the BIG-IP devices open. By default, BIG-IP will log all the REST API related events locally to restjavad.0.log . These logs can also be directed to a remote syslog server (see https://support.f5.com/csp/article/K13080). On a side note, the ltm log files listed below contains log messages specific to BIG-IP local traffic management events.

Regards