Aurel
Aug 30, 2013Cirrus
HSL sending issue
Hi,
From the documentation, i do understand that HSL is quite simple syntax, and should work like this :
eg :
when HTTP_REQUEST {
set hsl [HSL::open -proto UDP -pool POOL_SYSLOG]
set test ...
Okay, here's a thought:
when CLIENT_ACCEPTED {
set hsl [HSL::open -proto UDP -pool syslog_server_pool]
}
when HTTP_REQUEST {
HSL::send $hsl "Time: [clock clicks] - request from - [IP::client_addr] to [HTTP::uri]\n"
}
Based on the above TEST iRule, create a syslog server pool that contains a random IP address - something that isn't used by anything else. Then in your TCPDUMP, open it up to all interfaces and look for syslog port (514) traffic going to this IP:
tcpdump -lnni 0.0 port 514 and host 10.10.10.10
Apply this iRule to the VIP and test. If you see ANY syslog traffic then you know that the configuration is probably correct on the BIG-IP side. Look at your original syslog pool and make sure a monitor isn't marking the nodes down.