Forum Discussion
WHICH VIRTUAL SERVER IS APPLIED TO AN INTERMEDIATE IRULE FOR HIGH SPEED LOGGING.
I would like to ask which virtual server, will be applied to an intermediate irule. The irule listed on Devcentral for high speed logging on f5 to arcsight or splunk on the following devcentral article https://devcentral.f5.com/articles/irules-high-speed-logging-spray-those-log-statements is
ltm rule testrule { when CLIENT_ACCEPTED { set lpAll [HSL::open -publisher /Common/lpAll] } when HTTP_REQUEST { HSL::send $lpAll "<190> [IP::client_addr]:[TCP::client_port]-[IP::local_addr]:[TCP::local_port]; [HTTP::host][HTTP::uri]" } }
However,i'll like to know which virtual server,the irule will be attached to. Thanks
- Samir_Jha_52506Noctilucent
Thanks for updating me. Yes, IP address is already menmber of arcsignt server.
 
Please refer below link
 
- kazeem_yusuf1Nimbostratus
Hi f5_rock. I don't understand. will the Vip of the arcsight,be the same ip address of the arcsight?
What will trigger requests to the VIP of Arcsight/Splunk.
keep in mind,that,the ip address of the arcsight servers is listed in the pool members already .
Kindly explain
- kazeem_yusuf1Nimbostratus
Hi f5_rock. I don't understand. will the Vip of the arcsight,be the same ip address of the arcsight?
What will trigger requests to the VIP of Arcsight/Splunk.
keep in mind,that,the ip address of the arcsight servers is listed in the pool members already .
Kindly explain
- kazeem_yusuf1Nimbostratus
Hi f5_rock. I don't understand. will the Vip of the arcsight,be the same ip address of the arcsight?
What will trigger requests to the VIP of Arcsight/Splunk.
keep in mind,that,the ip address of the arcsight servers is listed in the pool members already .
Kindly explain
- Samir_Jha_52506Noctilucent
Apply iRule to Splunk/arcsight vip and see log in splunk/arcsight collector.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com