LTM log size increase
LTM log size increase. How to increase ltm log size. currently as shown below creates new file at 40K file size. -rw------- 1 root root 43K May 2 04:02 ltm.23.gz -rw------- 1 root root 43K May 2 04:02 ltm.22.gz -rw------- 1 root root 43K May 2 04:02 ltm.21.gz -rw------- 1 root root 43K May 2 04:02 ltm.20.gz -rw------- 1 root root 44K May 2 04:02 ltm.19.gz -rw------- 1 root root 44K May 2 04:02 ltm.18.gz -rw------- 1 root root 43K May 2 04:02 ltm.17.gz -rw------- 1 root root 43K May 2 04:02 ltm.16.gz -rw------- 1 root root 41K May 2 04:02 ltm.15.gz -rw------- 1 root root 41K May 2 04:02 ltm.14.gz -rw------- 1 root root 41K May 2 04:02 ltm.13.gz -rw------- 1 root root 113 May 2 04:02 messages.1.gz -rw------- 1 root root 40K May 2 04:02 ltm.9.gz -rw------- 1 root root 40K May 2 04:02 ltm.8.gz -rw------- 1 root root 40K May 2 04:02 ltm.7.gz -rw------- 1 root root 39K May 2 04:02 ltm.6.gz -rw------- 1 root root 40K May 2 04:02 ltm.5.gz -rw------- 1 root root 39K May 2 04:02 ltm.4.gz -rw------- 1 root root 39K May 2 04:02 ltm.3.gz -rw------- 1 root root 40K May 2 04:02 ltm.2.gz -rw------- 1 root root 17K May 2 04:02 ltm.1.gz -rw------- 1 root root 40K May 2 04:02 ltm.12.gz -rw------- 1 root root 40K May 2 04:02 ltm.11.gz -rw------- 1 root root 40K May 2 04:02 ltm.10.gz I have increased more space in /var/log so i can increase the size of ltm log before it compress..?
F5 APM retrieve information for a specific username from archived audit tracks
Hi, I'm currently facing a nice challenge. One wants to know whether a specific user has logged on to our remote portal, within a month or even longer ago.. Our remote portal is to be accessed by a F5 APM appliance. Two weeks ago we've upgraded our appliances, so the last audit log is from two weeks ago. I can tell, when I choose in the menu "Access Policy" , "Reports" and I fill in 60 days or more, the last line shows a date which is two weeks ago. I'd like the report data from a month ago (and older). Before the upgrade a UCS file was made. So what I Did is extract the UCS file. searched with Windows Grep, typed the username as string, in all directories and files, off course, nothing with that username is found. Several questions has popped up right now: audit track of user logon onto a remote portal is actually kept within /var/log/audit?* The UCS file of previous APM state doesn't show a /var/log dir. Where are the logs stored? How am I able to fetch the data I need without returning to a previous state? I haven't got a spare appliance to restore the UCS to. Best, Erik