Forum Discussion

Sheigh_65772's avatar
Jul 17, 2012

LTM 11.X iRule Errors missing in /var/log/ltm

Hello,

 

 

Did some searches and didn't find a solution. I recently upgraded my 9.4 LTM to 11.x in dev and had some irule issues with the migration. This Friday I will be performing a migration onto new hardware going from 9.4 to 11.x for production.

 

 

In 9.4 I've been used to seeing where irules break by looking at the /var/log/ltm file as it will show the irule and the context for the error. When I performed the migration I experianced iRule errors but they weren't showing up in the /var/log/ltm.

 

 

In preperation for this coming producation migration should I be looking for errors in a different location? Maybe theres some additional logging settings I need to configure?

 

 

Heres the log settings from my prepped 11.x bigip_base.conf

 

 

 

 

sys daemon-log-settings tmm {

 

http-log-level debug

 

ip-log-level notice

 

irule-log-level debug

 

net-log-level debug

 

ssl-log-level debug

 

}

 

 

 

Thanks

6 Replies

  • By default, iRule errors and logs should be sent to /var/log/ltm. Do you have a custom syslog-ng config (bigip_sys.conf -> /etc/syslog-ng/syslog-ng.conf)? Are you logging remotely?

     

     

    Aaron
  • There is no customization to the logging except for those changes I listed made via the web interface and no remote logging service is configured.
  • When I performed the migration I experianced iRule errors but they weren't showing up in the /var/log/ltm.was it an error when converting config (including irule) to 11.x? or was it an irule error when passing traffic in 11.x?
  • In this case it isn't an ideal situation. We have old hardware at 9.4.8 which doesn't support some of the 10.x versions and we are migrating to new hardware that came preloded with a 10.x version our hw didnt support (now updated to 11.2).

     

     

    The decision was to go directly from the 9.4.8 to 11.2 without perfoming the upgrades inbetween because. This was because the 10.x systems utilized raided discks and F5 support said that there may be a possibility of losing that performance gain when going through the downgrade to 9.4 then upgrading to 11.

     

     

    Chances are the upgrade process would have caught the problems. These specific errors from when I did dev was when in an irule matchclass was used to check against a data group. The 11.x web based irule editor accepted the irules however when traffic came through the irules broke without outputing any details to ltm log.

     

     

  • however when traffic came through the irules broke without outputing any details to ltm log.how did you know if traffic was broken because of irule?
  • Just closing out this question, I had forgotten about it. The issue with the missing logs was my fault. I had been experimenting with the HSL logging and had it configured to send those logs off box.