Clear iRule info in the ltm log file

Hi,

I reassure you it's normal behavior. it's because you still have active connections (Changes like this are applied to all new connections).

to apply the new irula to the users you have several possibilities:

• delete connection

tmsh show sys connection cs-server-addr 

CS is Client Side (Client --> F5)
SS is Server Side (F5 --> Server)

cs-client-addr - Client IP
cs-server-addr - VS IP (VIP)

ss-client-addr - SNAT IP or Client IP i.e. cs-client-addr
ss-server-addr - Server IP address

• Use LTM Policy (Per request) instead irule if possible:

Ltm policy is execute for every request...

Similar problem:

https://devcentral.f5.com/questions/how-long-should-an-old-version-of-an-irule-hang-around

keep me in touch, Regards

You could use sed for this task. For example, in my /var/log/ltm file I see entries like:

Apr 24 12:31:01 nielsvs-bigip.vosko.lab info sdmd[6492]: 018e0017:6: pid[11267]  plugin[/Common/office365_endpoints_plugin.office365_endpoints_extension] info: latest version available is: 2019032800
Apr 24 12:31:01 nielsvs-bigip.vosko.lab info sdmd[6492]: 018e0017:6: pid[11266]  plugin[/Common/office365_endpoints_plugin.office365_endpoints_extension] info: latest version available is: 2019032800

These entries can be removed by using sed:

sed -i '/office365_endpoints_plugin.office365_endpoints_extension/d' /var/log/ltm

After this you'll need to restart syslog-ng.

bigstart restart syslog-ng

Make sure that you use an expression that only matches the lines you want to remove.