Forum Discussion

Pedro_Ferreira's avatar
Pedro_Ferreira
Icon for Nimbostratus rankNimbostratus
May 17, 2020
Solved

BIG-IQ collecting BIG-IP iRule logs

Hi,

 

With a BIG-IQ cluster and DCD managing multiple BIG-IPs, is it possible to have BIG-IQ centrally collecting iRule logs from the managed BIG-IPs? Making up a simple example of what I'm looking for, having an iRule that logs the client IP, like:

 

when HTTP_REQUEST {

  log local0.info "request from [IP::client_addr]"

}

 

Having this iRule applied to multiple VS on different BIG-IPs, is it possible to have that log output somehow displayed on BIG-IQ?

 

Thanks for your help

  • BIG-IQ DCD's (Data Collection Devices) can act as repositories for 'alerts, events, and statistical data from one or more BIG-IP systems', but do not store general system logs. BIG-IQ can help you create logging profiles which can be deployed across one or more BIG-IP systems and can have filters which match log messages of interest, but you need to have some remote storage and viewing system.

     

    Here's the documentation for creating and deploying logging profiles:

    https://techdocs.f5.com/en-us/bigiq-7-1-0/managing-ltm-and-network-objects-using-big-iq/managing-logs.html

4 Replies

  • BIG-IQ DCD's (Data Collection Devices) can act as repositories for 'alerts, events, and statistical data from one or more BIG-IP systems', but do not store general system logs. BIG-IQ can help you create logging profiles which can be deployed across one or more BIG-IP systems and can have filters which match log messages of interest, but you need to have some remote storage and viewing system.

     

    Here's the documentation for creating and deploying logging profiles:

    https://techdocs.f5.com/en-us/bigiq-7-1-0/managing-ltm-and-network-objects-using-big-iq/managing-logs.html

    • Pedro_Ferreira's avatar
      Pedro_Ferreira
      Icon for Nimbostratus rankNimbostratus

      Data Collection Device (DCD) is in my configuration. Can you help me setting it up to collect the logs I'm talking about?

       

      Thx