bumping - just got around to working on this again. logging works fine but my issue is my big-ip sends the syslog message with a hostname of "local" which doesn't really help a lot for reporting and searching.. any ideas on how to change that?
+---------+-------+----------+----------+--------+-------------+------------+----------+---------------------------+
| id | host | facility | priority | level | program | date | time | message |
+---------+-------+----------+----------+--------+-------------+------------+----------+---------------------------+
| 6277214 | local | user | notice | notice | notice root | 2010-04-20 | 11:11:03 | notice root: test message |
+---------+-------+----------+----------+--------+-------------+------------+----------+---------------------------+