Forum Discussion

Luca_55898's avatar
Luca_55898
Icon for Nimbostratus rankNimbostratus
Jul 08, 2011

Syslog errors only

My LTM are nailing my syslog server with so much stuff it makes that it is drowning out any imporant stuff.

 

 

How can i configure my LTM (version 10) to only send errors to the syslog server?

 

4 Replies

  • dubdub's avatar
    dubdub
    Icon for Nimbostratus rankNimbostratus
    It's pretty straightforward - create a file (/tmp/new_syslog.conf in this example; change "warn" to a different level if you want something else):

     

     

    syslog include "

     

    destination remote_server {

     

    udp(\"x.x.x.x\" port (514));

     

    };

     

    filter f_alllogs { level (warn...emerg);

     

    };

     

    log { source(local);

     

    filter(f_alllogs);

     

    destination(remote_server);

     

    };"

     

     

    Then run:

     

     

    bpsh < /tmp/new_syslog.conf

     

     

    Save it when you're done testing:

     

     

    b save

     

     

    Jen
  • Thanks for the info...

     

    I made the changes but am still seeing informational and debugging messages comming into my syslog:

     

     

    [root@LB001:Active] config b syslog include

     

    SYSLOG - Include Data:

     

    destination remote_server {

     

    udp("192.168.41.77" port (514));

     

    };

     

    filter f_alllogs {

     

    level (warn...emerg);

     

    };

     

    log {

     

    source(local);

     

    filter(f_alllogs);

     

    destination(remote_server);

     

    };

     

     

    Is there anything else i need?

     

  • dubdub's avatar
    dubdub
    Icon for Nimbostratus rankNimbostratus
    Sorry I didn't get back to this sooner, it got crazy for a bit. That's the same include file I use on all my LTMs (v10.1 or higher) and I don't see any info/debug messages in my syslog, so unfortunatley I have no idea why it's not working... Probably worth opening a case with support about it?

     

     

    Thanks,

     

    Jen