Forum Discussion
hooleylist
Mar 31, 2012Cirrostratus
Hi Ah Fat,
If you're on 10.1 or higher, I suggest using High Speed Logging to send the logging directly from TMM without logging locally or going through syslog-ng. HSL should be a lot more efficient. For details check the HSL wiki page:
https://devcentral.f5.com/wiki/iRules.hsl.ashx
And here are a couple of examples:
https://devcentral.f5.com/wiki/iRules.FormattedLoggingForW3c.ashx
https://devcentral.f5.com/wiki/iRules.Log-Tcp-And-Http-Request-Response-Info-Remotely.ashx
Aaron