Forum Discussion

MustphaBassim's avatar
Apr 13, 2024

syslog server connection

Hello Dears

i want to make the F5 device send log (local traffic log) sent to syslog server it is now send only for mangment but the traffic that pass virtual servers is not send to syslog server anyone can help plz?


Best Regards 

4 Replies

  • Hello Mustphabassim,

    1. You have to create pool for high speed logging
    2. create irule logs client ip, virtual server ip, server, etc ... mapping with high speed logs pool
    3. applied this irules to virtual server


    • MustphaBassim's avatar
      Icon for Cirrus rankCirrus

      Hello Dear

      what do mean by high speed logs pool ? and do have an idea about this irule since i tried many irules but no like for that


      • Teerarat's avatar
        Icon for Cirrus rankCirrus

        Hi Mustphabassim,

        Yes, its's HSL Pool, Please try step below,

        Step1 Create Syslog Pool

        Step2 Create this irule below

        when CLIENT_ACCEPTED

        { set hsl [HSL::open -proto UDP -pool syslog_server_pool]


        HTTP_REQUEST {

        HSL::send $hsl "<190> [IP::client_addr]:[TCP::client_port]->[IP::local_addr]:[TCP::local_port]; [HTTP::host][HTTP::uri]"


        Step3 Apply to virtual server