Logging some log on a remote syslog and not on the log file
Hi,
I try to do something via iRules but it's not working.
Our F5 BIG-IP is a reverse proxy and I want to log the public client IP to know who was connected to which URL. But it represents a lot a logs.
So, I try to put this log directly on a remote syslog server without pass by the BIG-IP log file.
I do that via an iRule (the HSL doesn't work with our syslog server for instance). I try several implementation with the log commmand : * log XXX.XXX.XXX.XXX local0. ... * log -noname XXX.XXX.XXX.XXX local0. ...
But nothing works. There, you will find my iRules.
when HTTP_REQUEST {
set host [HTTP::host]
set path [HTTP::path]
}
when SERVER_CONNECTED {
log xxx.xxx.xxx.xxx local0. "Client Source IP: [IP::client_addr] --- HOST: $host$path"
}
If someone could help me, it will be wonderfull. Actually, I have a full log file which turn during the day and the syslog server keep all the log. But I want to improve this.
Thanks in advance.
Best regards,
Agathe