Hi Jeff,
I think this should work, but I'd test it on a test unit first.
Add this to a temp file named syslog.inc
syslog include "
destination d_messages {
file("/var/log/messages" create_dirs(yes));
udp(\"10.0.0.1\" port (514));
};
destination d_audit {
file("/var/log/audit" create_dirs(yes));
program("/usr/bin/audit_forwarder");
udp(\"10.0.0.1\" port (514));
};
destination d_ltm {
file("/var/log/ltm" create_dirs(yes));
udp(\"10.0.0.1\" port (514));
};"
Then load it into memory:
bpsh < syslog.inc
Test to verify the configuration is working.
If it does, then run:
b save all
If it does not, run:
b syslog include none
b save all
Aaron