Forum Discussion

jamesdris's avatar
jamesdris
Icon for Nimbostratus rankNimbostratus
Jul 27, 2015

HSL not working

I am trying to send logs to a remote server via port 514, here is what I put into my irule:

 

when CLIENT_ACCEPTED { set hsl [HSL::open -proto UDP -pool syslog-server-pool]

 

} when SERVER_CONNECTED { HSL::send $hsl "IP accessing VIP is: [IP::client_addr]:[TCP::client_port] -- bigip made connection from [IP::local_addr]:[TCP::local_port serverside] to pool member [IP::server_addr]:[TCP::server_port]" } when i set log local.0 in each of the events, they are generating logs, which means the events are actually taking place. But i dont see any logs in my target server iam using tmm interface through a self-ip to send logs the syslog pool has member monitor setup which is green. my version of bigip is 10.2.4, i dont see any logs for HSL when the events are triggered, they are not seen on the remote server as well. Any help with this is appreciated.

 

application delivery
devops
iRules
LTM

2 Replies

Sort By
  • pete_71470's avatar
    pete_71470
    Icon for Cirrostratus rankCirrostratus
    Jul 27, 2015

    With HSL::send you need a prefix on the string to tell the syslog server how to log message (facility, severity).

    Take a peek here: link text.

    So for example, if you wanted to write the message to local1.info on the syslog server your HSL::send would look like this:

    HSL::send $hsl "<142> IP accessing VIP..."

    • jamesdris's avatar
      jamesdris
      Icon for Nimbostratus rankNimbostratus
      Aug 03, 2015
      Even after setting the log type in log to be sent, nothing is showing up in the logs for any HSL::send event.