27-Jun-2022 21:37
Hi,
Would like to know, will F5 logs all the incoming connections into a log file?
like /var/log/ltm holds all local traffic logs, looking for similar file which hold all incoming connections to the VS?
i know we can check the current connections via tmsh show sys connections <different parameters>. but needed history.
Solved! Go to Solution.
29-Jun-2022 01:58
Hi,
You can create a script that is run in the crontab every 30 seconds for example and export the data to an external server using scp, the disk capacity in the device is very limited and if you perform this task locally you can have many issues.
28-Jun-2022 01:15
Hi,
BIG-IP system is not a logging server and has limited capacity for storing, archiving, and analyzing logs. A dedicated logging server is recommended for extensive logging functions. The BIG-IP system is configured by default to provide the most relevant log information to administrators.
Changing the default log levels to a higher level increases the amount of data stored on the device. If the default levels are changed for troubleshooting purposes, remember to set the level back to its default setting.
Additional to modify the log setting for default you to have to go to the path:
System ›› Logs : Configuration : Options
Additional you can export the log connection to a file the inside your virtual server with this command:
tmsh show sys connection cs-server-addr 192.168.138.30 > /var/tmp/connection.txt
Hope it´s work.
28-Jun-2022 09:39
Hi Sebastian
tmsh show sys connection cs-server-addr 192.168.138.30 > /var/tmp/connection.txt ---> didnt work. got error unknown parameter on ">"
28-Jun-2022 09:43
Hi,
You have to execute the command from the cli, no from the tmsh, look:
28-Jun-2022 09:53
that worked. Thanks.
but. i need that to be logged for a particular amount of time, say 1 hour like that
29-Jun-2022 01:58
Hi,
You can create a script that is run in the crontab every 30 seconds for example and export the data to an external server using scp, the disk capacity in the device is very limited and if you perform this task locally you can have many issues.