Forum Discussion

Alfa-Alfa's avatar
Alfa-Alfa
Icon for Nimbostratus rankNimbostratus
Aug 12, 2024

ASM - Event log no records to display

Hi!

 

i have issue with event log > application > request and i cant see event log including support id, only notice "event log no record to display" , then all the virtual server assigned logging profile but i never see that the log, previously there was no problem. 

 

but i got the log like this.

 

asmlogd|INFO|Aug 12 17:35:28.546|12341|F5::RequestLog::__ANON__,,Deleting unused file /var/asmdata1/request_log/0000069229
asmlogd|INFO|Aug 12 17:35:28.546|12341|F5::RequestLog::__ANON__,,Deleting unused file /var/asmdata1/request_log/0000069169
asmlogd|INFO|Aug 12 17:35:28.546|12341|F5::RequestLog::__ANON__,,Deleting unused file /var/asmdata1/request_log/0000069246
asmlogd|INFO|Aug 12 17:35:28.546|12341|F5::RequestLog::__ANON__,,Deleting unused file /var/asmdata1/request_log/0000069223
asmlogd|INFO|Aug 12 17:35:28.546|12341|F5::RequestLog::__ANON__,,Deleting unused file /var/asmdata1/request_log/0000069304

 

 

security
  • Alfa-Alfa's avatar
    Alfa-Alfa
    Icon for Nimbostratus rankNimbostratus
    Aug 12, 2024

    hi!

    actually i need local storage because for checking support id. is the process of dropping older partitions log asmlogd|INFO|Aug 12 17:35:28.546|12341|F5::RequestLog::__ANON__,,Deleting unused file /var/asmdata1/request_log/0000069304 and just waiting or any suggest?

  • Aswin_mk's avatar
    Aswin_mk
    Icon for Cumulonimbus rankCumulonimbus
    Aug 12, 2024

    I hope you read the suggestions from F5"F5 recommends to log only illegal requests locally for Virtual Servers where ASM policy is not in learning mode. Remote logging is preferred choice for Logging all requests. This will drastically reduce the number of requests being logged allowing them to stay longer on the unit.". Please let me know if you only store illegal requests. Also you can try to check increasing disk space.

     

    https://my.f5.com/manage/s/article/K15741187 - The "/var/asmdata1" partition is where the request log resides, so some growth is expected. Eventually the cleaning mechanism kicks in to keep the size of the request log in check.