adam_rothschild
Oct 20, 2015Nimbostratus
irule to send to syslog and not write to log file
I would like an irule that sends to a syslog server rather than write the log to any logfile locally. So far I can get my log in /var/log/ltm and the syslog server that the box has set as the remote logging server. But I cannot get it to just send to the server listed in the irule and not appear in the local log. I left just the IP of the log server and removed local0. I dont get anything in either place after that. Any Suggestions?
when SERVER_CONNECTED {
set snat [IP::local_addr]
log 10.X.X.X local0. "[IP::client_addr], [IP::local_addr], [IP::server_addr]"
}
when SERVER_CLOSED {
set snat [IP::local_addr]
log 10.X.X.X local0. "[IP::local_addr], [IP::server_addr]"
}