vip for audit logs to splunk

Question

Hello everyone i have created a new virtual server for splunk to send the logs from avaya servers to loadbalance between splunk poolmembers.&nbsp;
virtual server - splunk.xxx.com port 10110
client profile and protocol are udp in virtual server settings.
monitor : udp &nbsp;
problem statement : i see logs in splunk as default send string&nbsp;
what would be the problem and why dont i see the actual logs sent by avaya servers... ??&nbsp;

bobow · Answer

Hi Prasad,&nbsp;
Did you have successful send logs from F5 to Splunk?
As my experience to send logs from F5 to splunk, i dont need to create VS, i just create node on pool and put them in Log Destinations&nbsp;

Forum Discussion

vip for audit logs to splunk

1 Reply

Recent Discussions

F5 Rseries HA

Error when running bigip_command Playbook against LTM : Syntax Error: unexpected argument /bin/sh\n

Can iRule be used to perform exception of IPI category based on Geolocation

Can iRule mask the payload content on event logs of security

minimum tmos software version for connect CIS (openshift)

Related Content

Auditing Security Policy Updates

Logging/Audit Binary Execution?

BIGIP ASM audit logging

Setting up F5 Telemetry Streaming with Splunk Cloud

Audit logs to splunk