Forum Discussion

mbjelo's avatar
mbjelo
Icon for Nimbostratus rankNimbostratus
Jul 05, 2018

Question about LTM logging

Hi F5 support,

 

I have one question regarding ltm logging. I created log profile from Local traffic->Profiles->Other->Request Logging and applied that profile to one of my virtual servers. I have one simple question : Where I can read logs logged with profile I created, where logs are stored and how I can read it? :)

 

3 Replies

  • HTTP request logs are sent to a log server, you can configure a pool with one or more syslog servers and then select it in the request logging profile (Request Settings > Pool Name). You could do tests using a local syslog server such as "kiwi syslog server free edition" or "visual syslog server"

     

  • If you don't want to ship them off the box, you can SSH to the BigIP, and look under the /var/log/ltm folder.

     

    I usually tail the log to see new entries. tail -F /var/log/ltm

     

  • There are two methods:

     

    1. You can send logs to Syslog servers, eg: Splunk, Kiwi etc..

       

    2. You can view logs on device it self

       

    Go to cd /var/log/ and use any below command as per requirement.

     

    tail -f ltm | grep tail -f ltm | grep tail -f ltm