Forum Discussion
Chris_Grant
Jan 04, 2018Employee
This should probably be a support case. Having said that, I would take a packet capture at two points, at the BigIP and at the syslog server. You want to see if the traffic is leaving the BigIP and if it's arriving at the syslog server. Be aware that the BigIP may be trying to use the management vs TMM. Depending on your software version, it may do this even if you have it configured to do otherwise.