Forum Discussion

Nath's avatar
Nath
Icon for Cirrostratus rankCirrostratus
Jan 23, 2023
Solved

Sending syslogs and ltm logs to BIGIQ DCD

Has anyone tried sending syslogs and LTM logs from BIGIP to DCD?

I am exploring the BIG-IQ and DCD and trying to figure out this kind of setup.

application delivery
devops
security
  • Paulius's avatar
    Paulius
    Jan 24, 2023

    Nath It seems like a configuration conflict with what is on the BIG-IQ doesn't match what is on the BIG-IP or possibly the other way around. These types of errors have occurred for me when a profile existed on the BIG-IQ and I synced the configuration to the BIG-IP with the checkbox something along the lines of "Delete Unused Objects" so the BIG-IQ was issuing a delete of the profile it had but the BIG-IP didn't have so it errored out. You might see if something like that exists when you are attempted to perform the discovery.

5 Replies

Sort By
  • Paulius's avatar
    Paulius
    Icon for MVP rankMVP
    Jan 23, 2023

    Nath Sadly I have only had the opportunity to configure a BIG-IQ CM but I have looked into the DCD piece and it seems fairly straight forward to point to the DCDs that you want to collect this data. What is the issue that you are encountering when setting this up? Or are you wanting to know just general pieces that need to be configure to send syslog to DCD?

    • Nath's avatar
      Nath
      Icon for Cirrostratus rankCirrostratus
      Jan 24, 2023

      I'm trying to send Syslog to DCD and I did this using Remote HSL. However, when remote HSL is configured in BIGIP I'm getting errors whenever I'm doing device discovery and import(see below).

      Also in which part of BIG-IQ I can see the syslogs that BIGIP is sending?

       

      • Paulius's avatar
        Paulius
        Icon for MVP rankMVP
        Jan 24, 2023

        Nath It seems like a configuration conflict with what is on the BIG-IQ doesn't match what is on the BIG-IP or possibly the other way around. These types of errors have occurred for me when a profile existed on the BIG-IQ and I synced the configuration to the BIG-IP with the checkbox something along the lines of "Delete Unused Objects" so the BIG-IQ was issuing a delete of the profile it had but the BIG-IP didn't have so it errored out. You might see if something like that exists when you are attempted to perform the discovery.