Forum Discussion

Jibin's avatar
Jibin
Icon for Nimbostratus rankNimbostratus
Jan 02, 2020

F5 Logs Rotates very faster

Hello Team,

 

We are running V13.0.0 on our F5's and recently it has started rotating very faster in in every minutes and gets all the post dated logs disapper from the device. I have started seeing this behaviour recently where the F5 was preserving the logs atleast for 5 days within it.

Have checked the log rotation config and hadnt seen any anomalies.

Did anyone came across such an issue earlier - the files of var/log/ltm and var/log/audit.

 

 

 

-rw-------. 1 root   root     340994 2020-01-02 12:28 ltm.10.gz

-rw-------. 1 root   root     340245 2020-01-02 12:28 ltm.9.gz

-rw-------. 1 root   root     334782 2020-01-02 12:29 ltm.8.gz

-rw-------. 1 root   root     344691 2020-01-02 12:30 ltm.7.gz

-rw-------. 1 root   root     347210 2020-01-02 12:30 ltm.6.gz

-rw-------. 1 root   root     337880 2020-01-02 12:31 ltm.5.gz

-rw-------. 1 root   root     342120 2020-01-02 12:31 ltm.4.gz

-rw-------. 1 root   root      13032 2020-01-02 12:33 ltm.3.gz

-rw-------. 1 root   root     661468 2020-01-02 12:33 ltm.2.gz

-rw-------. 1 root   root     524911 2020-01-02 12:33 ltm.1

-rw-------. 1 root   root     8544733 2020-01-02 12:34 ltm

 

1 Reply

  • It could be that your logs are growing faster than before. On my BIG-IP the log should rotate when its size is about 10MB. Looking at your list, the current ltm file (8544733) already is 8MB.

     

    # tmsh list sys log-rotate max-file-size

    sys log-rotate {

      max-file-size 1024000

    }

    #