seeing failover events
When over in the data center recently I noticed on the front panel of our F5's that several active/standby changes had occured between the 3 appliances we have. This was news to me as I'd not seen any events in the logs on the web gui, or anything to suggest there had been problems. Digging a little deeper in the ltm log files I have found several of these messages:
Mar 20 09:51:47 tmm notice tmm[7157]: 01010029:5: Clock advanced by 4484 ticks
Mar 20 09:51:47 tmm info tmm[7157]: 01190004:6: Resuming log processing at this invocation; held 15 messages.
Mar 20 09:51:47 tmm warning tmm[7157]: 01190004:4: address conflict detected for 192.168.1.32 (00:23:e9:51:a8:03) on vlan 4094
Mar 20 09:51:47 tmm warning tmm[7157]: 01190004:4: address conflict detected for 192.168.1.30 (00:23:e9:51:a8:03) on vlan 4094
Mar 20 09:51:47 tmm warning tmm[7157]: 01190004:4: address conflict detected for 192.168.1.51 (00:23:e9:51:a8:03) on vlan 4094
Mar 20 09:51:47 tmm warning tmm[7157]: 01190004:4: address conflict detected for 192.168.1.31 (00:23:e9:51:a8:03) on vlan 4094
Mar 20 09:51:47 tmm warning tmm[7157]: 01190004:4: address conflict detected for 192.168.1.52 (00:23:e9:51:a8:03) on vlan 4094
Mar 20 09:51:47 tmm info tmm[7157]: 01190004:6: Per-invocation log rate exceeded; throttling.
Mar 20 09:51:49 dcsltm01 notice sod[4708]: 010c002a:5: Requesting tmm to resend gratuitous arps for traffic group /Common/traffic-group-1.
Reading around this probably coincides with a failover happening, as the VIP's may have been active in two places and caused a brief conflict.
I guess my question is this, how do I see when failovers between traffic group members have occured? Is there somewhere I can see the last failover, reasons it happened etc?
Cheers