WHICH VIRTUAL SERVER IS APPLIED TO AN INTERMEDIATE IRULE FOR HIGH SPEED LOGGING.

Question

I would like to ask which virtual server, will be applied to an intermediate irule.
The irule listed on Devcentral for high speed logging on f5 to arcsight or splunk on the following devcentral article https://devcentral.f5.com/articles/irules-high-speed-logging-spray-those-log-statements is  
&nbsp;
ltm rule testrule {
  when CLIENT_ACCEPTED {
    set lpAll [HSL::open -publisher /Common/lpAll]
  }
  when HTTP_REQUEST {
    HSL::send $lpAll "&lt;190&gt; [IP::client_addr]:[TCP::client_port]-[IP::local_addr]:[TCP::local_port]; [HTTP::host][HTTP::uri]"
  }
}&nbsp;
However,i'll like to know which virtual server,the irule will be attached to.
Thanks&nbsp;

samir_jha_52506 · Answer

Apply iRule to Splunk/arcsight vip and see log in splunk/arcsight collector.&nbsp;

kazeem_yusuf1 · Answer

Hi f5_rock.
I don't understand. will the Vip of the arcsight,be the same ip address of the arcsight? &nbsp;
What will trigger requests to the VIP of Arcsight/Splunk.&nbsp;
keep in mind,that,the ip address of the arcsight servers is listed in the pool members already .&nbsp;
Kindly explain&nbsp;

kazeem_yusuf1 · Answer

Hi f5_rock.
I don't understand. will the Vip of the arcsight,be the same ip address of the arcsight? &nbsp;
What will trigger requests to the VIP of Arcsight/Splunk.&nbsp;
keep in mind,that,the ip address of the arcsight servers is listed in the pool members already .&nbsp;
Kindly explain&nbsp;

kazeem_yusuf1 · Answer

Hi f5_rock.
I don't understand. will the Vip of the arcsight,be the same ip address of the arcsight? &nbsp;
What will trigger requests to the VIP of Arcsight/Splunk.&nbsp;
keep in mind,that,the ip address of the arcsight servers is listed in the pool members already .&nbsp;
Kindly explain&nbsp;

samir_jha_52506 · Answer

Thanks for updating me. Yes, IP address is already menmber of arcsignt server.¬†
Please refer below link ¬†

Forum Discussion

WHICH VIRTUAL SERVER IS APPLIED TO AN INTERMEDIATE IRULE FOR HIGH SPEED LOGGING.

5 Replies

Recent Discussions

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

Pricing when used with aws waf

F5 terminal - help to run commands - disk space full

import live updates from version x to version y

Tenant image upgrade

Related Content

Intermediate iRules: High Speed Logging - Spray Those Log Statements!

Intermediate iRules: Iteration

Integrating SSL Orchestrator with Fortinet FortiGate Virtual Edition as a Virtual Wire

iControl REST + jq Cookbook - Part 2: Intermediate

After applied ASM Policy to Virtual Server, connections will reset with Internal error in log