cancel
Showing results for 
Search instead for 
Did you mean: 

Problem between F5 CGNAT and Graylog Server

PaulONL
Nimbostratus
Nimbostratus

Dear F5 Community,

 

I have F5 model Model: BIG-IP i7600 with version: Version: 14.1.0.3 Build 0.0.6 running as CGNAT.

And I installed Graylog server version: 3.0 free edition to receive the LSN CGNAT logs.

I followed document below to send the CGNAT logs from F5 CGNAT to the Graylog server as HSL, but Graylog can not receive the CGNAT logs from F5.

https://techdocs.f5.com/en-us/bigip-14-0-0/big-ip-cgnat-implementations-14-0-0/using-cgnat-logging-a...

 

Everyone used to have such experience? and how to solve the issue?

 

Please kindly advise.

Thank you.

 

2 REPLIES 2

NAG
Cirrostratus
Cirrostratus

Hi,

 

I didnt come across such a problem.

 

However, best way to troubleshoot to find the root cause is to take packet captures::

 

Here is the command you could use to get packet captures F5:

 

tcpdump -vvni 0.0:nnnp -s0 host <IP_Address_of_Graylog> and port <PORT_of_Graylog> -w /var/log/file_name.pcap

 

Hope this helps,

Nag

PaulONL
Nimbostratus
Nimbostratus

Hi Nag,

 

Thank for your information.

Yes, i used to use the command: tcpdump 

I can see message sending to Graylog server, but at the server Graylog does not receive the logs.

May you please have any more advice?

 

Thank with regards,

PaulONL