For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

BK1's avatar
BK1
Icon for Cirrus rankCirrus
Dec 15, 2020
Solved

F5 not sending logs to syslog

All of sudden F5 stopped sending logs to syslog servers. Syslogs servers are reachable from F5 but all of sudden logs not reaching syslog. There was no change done w.r.t. to syslog. Last weekend, we ...
application delivery
BIG-IP
LTM
syslog
  • jaikumar_f5's avatar
    jaikumar_f5
    Dec 15, 2020

    Can you run the below 1st, see if there's any service running.

    netstat -antp  | grep syslog

    If yes, have it captured in a file, then try restarting the syslog daemon,

    bigstart restart syslog-ng

    Again run the netstat to see if its showing anything. I suspect, after your reboot, either your syslog daemon may not have started or might taken a different route.

BK1's avatar
BK1
Icon for Cirrus rankCirrus
Dec 15, 2020

After daemon restart, I can see logs on syslog server now. Also I was able to see connection established with syslog server under /var/log/messages file. Both inputs will be helpful for me in future. Thank you​

  • jaikumar_f5's avatar
    jaikumar_f5
    Icon for Noctilucent rankNoctilucent
    Dec 15, 2020

    Glad to hear its resolved.