Forum Discussion

smp_86112's avatar
smp_86112
Icon for Cirrostratus rankCirrostratus
Apr 10, 2013

configsync.peerconfigtimeraw messages in /var/log/audit

Suddenly after upgrading my 6900s from 10.2.4HF3 to 10.2.4HF6, I am getting these messages every 30 seconds in /var/log/audit:

 

 

Apr 10 13:41:02 local/ztestltm2 notice bigpipe[11941]: 012e0045:5: AUDIT - user root - db configsync.peerconfigtimeraw { 1365602418 }

 

 

I am getting this message on both the Active and Standby units. I opened a support case and was advised this message is a result of a HF5 patch which "fixed" bug 406733 - "Fixed a defect where some bigpipe commands are not correctly audited". The engineer has advised me he found three ways to "get rid" of this error:

 

1. Disable detecting ConfigSync status - not a very good idea

 

2. Disabling bigpipe logging - also not a very good idea

 

3. grepping out the string from /var/log/audit

 

 

I don't think any of these three options are satisfactory. Anyone else have a way fix to this?

 

management
monitoring

3 Replies

Sort By
  • smp_86112's avatar
    smp_86112
    Icon for Cirrostratus rankCirrostratus
    Apr 12, 2013

    No response...interesting.

     

     

    Is anyone else running 10.2.4 HF5 or above getting these configsync.peerconfigtimeraw messages in /var/log/audit too? Or is this a misconfiguration on my units?

     

    • Mirageboss_1034's avatar
      Mirageboss_1034
      Icon for Nimbostratus rankNimbostratus
      Apr 14, 2014
      We jsut upgraded to Sys::Version Main Package Product BIG-IP Version 10.2.4 Build 817.0 Edition Hotfix HF7 Date Mon May 20 15:08:56 PDT 2013 and are getting the same messages as well..... Is there a fix out there ?
    • smp_86112's avatar
      smp_86112
      Icon for Cirrostratus rankCirrostratus
      Apr 14, 2014
      I have not found a solution, so I have lived with it up to this point.