cancel
Showing results for 
Search instead for 
Did you mean: 

bigip sending logs without being configured to send

Aviv
Nimbostratus
Nimbostratus

i have configured bigip to send log to kibana syslog.

i have deleted the setting.

i still getting asm logs from the bigip.

 

i do not see the kibana setting at the bigip.

 

d u know what else to check?

 

thanks,

 

Aviv

1 REPLY 1

AlexBCT
MVP
MVP

Hi Aviv,

 

Interesting one... Here is a list of all the location where you can configure logs to remote destinations that I can remember from the top of my head, maybe one of them is still configured;

  • ASM logs; Security ›› Event Logs : Logging Profiles
  • LTM logs (legacy); System ›› Logs : Configuration : Remote Logging
  • HSL logs; System ›› Logs : Configuration : Log Destinations
  • iRule legacy remote logging; look for something like "log 10.10.231.1 local0.info "Client Connected, IP: [IP::client_addr]"
  • iRule HSL logging; look for something like "set hsl [HSL::open -proto UDP -pool syslog_server_pool]"

 

If still no luck finding it, can you post a log message so we can see the formatting of the log message? it may give some clues as well.

 

Hope you find the culprit 😉