Oddly enough, I upgraded the code to 13.1.1 last night and when the Big IP first restarted, the locals wrote to the local LTM file and the HSL server, but after the upgrade was finished, no events would get logged to the local LTM file except for iRule related events that specified to log to local.0. I have a TAC case open and they said that the config looks good and that they are escalating the issue, but I was wondering if anybody has ran into this and how it was resolved. One of my publishers goes to HSL and the other goes to local-db and local-syslog. The reason I am trying to do this is to setup email alerts which are apparently dependent on events getting logged locally, but I also wish to be able to search splunk for network events.