Forum Discussion

cjbarr1234's avatar
cjbarr1234
Icon for Nimbostratus rankNimbostratus
Jan 22, 2015

Request Logging Profile: Profile not writing to LogIQ

Hello,

 

I am having a very difficult time getting the Request Logging Template to write to the logs. My current template is:

 

REQUEST SETTINGS:

 

Request Logging: Enabled

 

TEMPLATE:

 

$DATE_YYY-$DATE_MM-DATE_DD $TIME_HMS SOURCE $CLIENT_IP:$CLIENT_PORT METHOD:$HTTP_METHOD REQUEST: $HOST $HTTP_URI $HTTP_PATH $HTTP_REQUEST $HTTP_STATCODE

 

HSL Protocol: TCP Pool Name: EM-Index-Cluster

 

RESPONSE SETTINGS:

 

RESPONSE: ENABLED

 

TEMPLATE:

 

RESPONSE:$RESPONSE_SIZE $RESPONSE_MSECS $REFERER ${User-agent}

 

5 Replies

  • The Date Year argument is actually: $DATE_YY sorry for the confusion.
  • What's the question exactly? Are the logs just not making it to your syslog server?
  • Hey Brad - I'm questioning my profile I built. The logs are not triggering any events to the syslog server. I did create a test log filter for debug and I see events being written, but after removing the test log filter nothing writes to my index cluster.
  • Hi cj,

     

    Not sure if you ever get your issue resolved. I am facing a similar problem where the request logging profile configured for a VS does not seem to capture traffic. Th estrange thing is that on a different device, the same configuration works (destination is different.) Any hints how to troubleshoot request logging profile would be much appreciated.