Forum Discussion
- mf5Nimbostratus
you can log the traffic locally using irule, please check the link for more details
https://devcentral.f5.com/s/articles/the101-irules-101-logging-amp-comments
This irule will help you to check traffic hitting to virtual server and source IP address.
when HTTP_REQUEST { log local0. “Requested hostname: [HTTP::host] from IP: [IP::local_addr]” }
- Simon_BlakelyEmployee
You can log locally for testing and debugging purposes, but you should use High Speed Logging to a syslog server if you are want to keep collecting logs.
The BigIP is not optimized for the significant I/O generated by high levels of local logging.
- SmithyCirrostratus
Use this to create a HSL configuration: https://github.com/brett-at-f5/tmsh/blob/master/create_hsl_log_publisher.tmsh
Use this to log the full proxy connection (Client --> VS : SNAT --> Pool Member) via HSL: https://github.com/brett-at-f5/irules/blob/master/logging/log_ip_nat_hsl_irule.tcl
You can modify the above for Syslog format.