CirrusI have deployed 2 F5 and they are in production. The problem is that i don't see much in logs. As its a Layer 7 device so in case of any error client always involve F5 and ask for logs which can show that request successfully landed on F5 and reached server and vice versa.
But my logs doesn't show this. How can i achieve this?
Are you referring to logs showing the traffic that each device is moving? If so, I would be very careful about logging that sort of data to the local syslog daemon and the disk of the BIG-IP. A large volume of traffic (and therefore logs) could cause a negative impact on your system.
The best way, I feel, is to use High-Speed Logging to send logs to a off-box system. You can find instructions to configure it for your situation in this guide: https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-external-monitoring-implementations-11-5-0.html
Thanks.
A quick google search for your error message returned the following result: http://blog.techstacks.com/2009/08/xfirefault-can-not-invoke-service-over-ssl.html
Is your SSL certificate self-signed?
You can run tcpdump in a continuous mode, where it will create multiple files, and begin writing over the oldest file once it hits a configured limit. A decent looking example may be found here: http://superuser.com/a/289250 This will allow you to capture the traffic, and analyze it after detecting the error. Be cautious to not configure tcpdump to use more space than is available on the system.
You certainly can log to syslog, but just keep in mind that you may see higher than average CPU and disk I/O usage. I would not run logging to local disk on a busy service for an extended period of time.
An iRule seems to be the best option here, and is what I usually use for brief debug sessions. I checked the Request logging profile and does not seem to have an option to log to the local box.
A good guide on writing an iRule to log request information can be found here.
https://devcentral.f5.com/articles/-the101-irules-101-logging-amp-comments
For HTTP traffic, I use an iRule like this one:
https://devcentral.f5.com/wiki/iRules.LogHttpHeaders.ashx
