Forum Discussion

kazeem_yusuf1's avatar
kazeem_yusuf1
Icon for Nimbostratus rankNimbostratus
Apr 21, 2017

WHICH VIRTUAL SERVER IS APPLIED TO AN INTERMEDIATE IRULE FOR HIGH SPEED LOGGING.

I would like to ask which virtual server, will be applied to an intermediate irule. The irule listed on Devcentral for high speed logging on f5 to arcsight or splunk on the following devcentral article https://devcentral.f5.com/articles/irules-high-speed-logging-spray-those-log-statements is

 

ltm rule testrule { when CLIENT_ACCEPTED { set lpAll [HSL::open -publisher /Common/lpAll] } when HTTP_REQUEST { HSL::send $lpAll "<190> [IP::client_addr]:[TCP::client_port]-[IP::local_addr]:[TCP::local_port]; [HTTP::host][HTTP::uri]" } }

 

However,i'll like to know which virtual server,the irule will be attached to. Thanks

 

  • Thanks for updating me. Yes, IP address is already menmber of arcsignt server.

     

    Please refer below link

     

  • Hi f5_rock. I don't understand. will the Vip of the arcsight,be the same ip address of the arcsight?

     

    What will trigger requests to the VIP of Arcsight/Splunk.

     

    keep in mind,that,the ip address of the arcsight servers is listed in the pool members already .

     

    Kindly explain

     

  • Hi f5_rock. I don't understand. will the Vip of the arcsight,be the same ip address of the arcsight?

     

    What will trigger requests to the VIP of Arcsight/Splunk.

     

    keep in mind,that,the ip address of the arcsight servers is listed in the pool members already .

     

    Kindly explain

     

  • Hi f5_rock. I don't understand. will the Vip of the arcsight,be the same ip address of the arcsight?

     

    What will trigger requests to the VIP of Arcsight/Splunk.

     

    keep in mind,that,the ip address of the arcsight servers is listed in the pool members already .

     

    Kindly explain