>> access related Syslog message for F5 Big IP LTM for CMI network
can you elaborate on the information you need and the kind of syslog messages you are looking for? Access related messages refers to BIG-IP APM and CMI network refers to the communication channel between device group members, for e.g. ConfigSync messages.
For both, we have Error messages type articles in Askf5. For e.g.
These article contain more granular information about each error message. A summary of them would be the log messages reference that Jason provided above.
I want to capture all the syslog messages for F5 devices that we are using in our network.
Generally need to collect all the syslog messages F5 is generating when someone trying to access the devices.
For BIG-IP events, the system routes messages through syslog-ng to the local log files. For access to the system, you would be most interested in /var/log/ltm. Also review /var/log/audit, /var/log/secure.
For other log files and what they mean, refer to K16197: Reviewing BIG-IP log files
If you'd like to have the logs at a remote server, or consolidate the logs from multiple BIG-IP systems, you can configure BIG-IP to log to a remote server. Refer to:
and if things don't work:
Let me know if this doesn't address your query.