# F5 not sending logs to syslog

**URL:** <https://community.f5.com/t/f5-not-sending-logs-to-syslog/61560>\
**Category:** Technical Forums\
**Tags:** big-ip, syslog, ltm, application-delivery\
**Created:** [December 15, 2020, 5:59am UTC](https://community.f5.com/t/f5-not-sending-logs-to-syslog/61560 "2020-12-15T05:59:30Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![BK1](https://avatars.discourse-cdn.com/v4/letter/b/f9ae1b/32.png) [@BK1](https://community.f5.com/u/BK1)\
**Post date:** [December 15, 2020, 5:59am UTC](https://community.f5.com/t/f5-not-sending-logs-to-syslog/61560/1 "2020-12-15T05:59:30Z")

</div>

All of sudden F5 stopped sending logs to syslog servers. Syslogs servers are reachable from F5 but all of sudden logs not reaching syslog. There was no change done w.r.t. to syslog. Last weekend, we had upgraded our F5 to 14.1.2.x, post that we are seeing issues. Is there any bug with the 14.1.2.x.

Any input will be great help for us.

---

<div class="post-metadata">

**Author:** ![jaikumar\_f5](https://avatars.discourse-cdn.com/v4/letter/j/6a8cbe/32.png) [@jaikumar\_f5](https://community.f5.com/u/jaikumar_f5)\
**Post date:** [December 15, 2020, 7:50am UTC](https://community.f5.com/t/f5-not-sending-logs-to-syslog/61560/2 "2020-12-15T07:50:58Z")

</div>

Can you run the below 1st, see if there’s any service running.

```tcl
netstat -antp | grep syslog

```

If yes, have it captured in a file, then try restarting the syslog daemon,

```tcl
bigstart restart syslog-ng

```

Again run the netstat to see if its showing anything. I suspect, after your reboot, either your syslog daemon may not have started or might taken a different route.

---

<div class="post-metadata">

**Author:** ![Mayur\_Sutare](https://d1p9zq3aats0t8.cloudfront.net/user_avatar/community.f5.com/mayur_sutare/32/5035_2.png) [@Mayur\_Sutare](https://community.f5.com/u/Mayur_Sutare)\
**Post date:** [December 15, 2020, 8:51am UTC](https://community.f5.com/t/f5-not-sending-logs-to-syslog/61560/3 "2020-12-15T08:51:09Z")

</div>

In addition to inputs given by &nbsp;, can you please check logs under **/var/log/messages** files and see if there are any connection broken logs. If there are connection broken logs, then as per suggested by &nbsp;, you can check syslog daemon status and try by restarting it.

---

<div class="post-metadata">

**Author:** ![BK1](https://avatars.discourse-cdn.com/v4/letter/b/f9ae1b/32.png) [@BK1](https://community.f5.com/u/BK1)\
**Post date:** [December 15, 2020, 9:44am UTC](https://community.f5.com/t/f5-not-sending-logs-to-syslog/61560/4 "2020-12-15T09:44:53Z")

</div>

Thank you Jaikumar & Mayur for your inputs. It helps me to troubleshoot it. The syslog daemon is running. I checked logs under message file and I am seeing lots of broken connection logs for syslog. Just now, I restarted syslog daemon but still logs are not visible at syslog end. I will wait for some time and update here.

---

<div class="post-metadata">

**Author:** ![BK1](https://avatars.discourse-cdn.com/v4/letter/b/f9ae1b/32.png) [@BK1](https://community.f5.com/u/BK1)\
**Post date:** [December 15, 2020, 10:31am UTC](https://community.f5.com/t/f5-not-sending-logs-to-syslog/61560/5 "2020-12-15T10:31:21Z")

</div>

After daemon restart, I can see logs on syslog server now. Also I was able to see connection established with syslog server under /var/log/messages file. Both inputs will be helpful for me in future. Thank you​

---

<div class="post-metadata">

**Author:** ![jaikumar\_f5](https://avatars.discourse-cdn.com/v4/letter/j/6a8cbe/32.png) [@jaikumar\_f5](https://community.f5.com/u/jaikumar_f5)\
**Post date:** [December 15, 2020, 10:39am UTC](https://community.f5.com/t/f5-not-sending-logs-to-syslog/61560/6 "2020-12-15T10:39:03Z")

</div>

Glad to hear its resolved.