iRule Per VIP syslog and Formating the output

Question

Hi,&nbsp;

&nbsp;
&nbsp;
Does anybody know if an iRule can be configured to spit out syslog output to an unique syslog server on a per VIP basis?&nbsp;

&nbsp;
&nbsp;
Also any ideas on how to format the output from the LTM to a syslog server to look the same as an apache log? such as:&nbsp;

&nbsp;
&nbsp;
[Wed Oct 11 14:32:52 2000] [error] [client 127.0.0.1] client denied by server configuration: /export/home/live/ap/htdocs/test&nbsp;

&nbsp;
&nbsp;

&nbsp;
&nbsp;
Thanks,&nbsp;
Steve&nbsp;

nitass · Answer

if using syslog-ng, u may create stanza to filter only irule log and send to remote log server.

LTM 9.4.2+: Custom Syslog Configuration by Deb

https://devcentral.f5.com/s/articles/LTM-9-4-2-Custom-Syslog-Configuration

if using hsl, u can send log to remote log server directly from irule.

HSL - https://clouddocs.f5.com/api/irules/HSL.html

Forum Discussion