Forum Discussion

luigi_bros's avatar
luigi_bros
Icon for Nimbostratus rankNimbostratus
Feb 02, 2017

logs sent with source "localhost" after upgrade to 11.6.1 HF1

Hello community,

 

can you help me on this easy thing? After I have upgraded both units from 11.5.4 to 11.6.1HF1, logs only for services "mcpd and sod" are sent, locally and remotely, with a source "localhost". The rest are sent specifying the source (the hostname of the unit). I would like to fix this because I want to know who sends what. I cannot find an answer and a fix around. Can you help me please?

 

Here some of the logs with the problem:

 

Thu Feb 2 12:41:54 CET 2017 notice localhost sod[7215] 010c0053 Active for traffic group Wed Feb 1 14:21:37 CET 2017 info localhost mcpd[8516] 01071487 Commit id for device group Thu Feb 2 15:29:04 CET 2017 notice localhost mcpd[8516] 0107168c Incremental sync complete: Thu Feb 2 11:12:02 CET 2017 err localhost mcpd[8516] 01071587 Commit ID message ignored,

 

Here some of the logs with NO problem:

 

Thu Feb 2 10:51:38 CET 2017 info name-big-ip audit_forwarder audit_forwarder started. Thu Feb 2 10:49:45 CET 2017 info name-big-ip sshd[15294]subsystem request for sftp Thu Feb 2 12:41:27 CET 2017 notice name-big-ip alertd[15478] 01100043 logcheck Notice: Thu Feb 2 12:47:37 CET 2017 warning name-big-ip alertd[20244] 01100002 alertd is going down. Thu Feb 2 10:26:54 CET 2017 errname-big-iptmm[19948] 01010221 Pool /Common/

 

Thank you.

 

2 Replies

  • If I disable the hsl log filter then everything is normal. Is that a bug?

     

  • Restarting the service "mcpd" helped in resolving the issue.

     

    Restarting "mcpd" is distruptive of course.

     

    Thanks for your help. Luigi