Forum Discussion

THE_BLUE's avatar
THE_BLUE
Icon for Cirrostratus rankCirrostratus
Mar 07, 2021
Solved

Applicaton security logs stopped

There is no logs received from ASM, how to solve it ?

And how to check the utilization?

  • You can't view /var/log/ts/pabnagd.log?

    Is it a permission issue, no bash access? Or you did not know where the file is located?

     

    Did you check that your BIG-IP version is matching the versions listed in "Applies to (see versions):" in K93091504?

     

    Also yesterday you mentioned that "mysql -uasm -p`perl -MF5::Cfg -e 'print F5::Cfg::get_mysql_password()'` -e "select COUNT(*) from PRX.REQUEST_LOG"" returned a count of 0. Did you recently update the box? Even in my lab machines I have a count of >1000.

20 Replies

  • I think we need a bit more details.

    Did it work before? Are you logging locally or remote? Both?

    Are you logging violations only or all requests?

    What kind of utilization do you want to check? Connections to the VS? CPU utilization on the BIG-IP device?

     

    Some easy checks:

     

    Best of luck

    • THE_BLUE's avatar
      THE_BLUE
      Icon for Cirrostratus rankCirrostratus

      Did it work before? yes, only today has been stopped

      Are you logging locally or remote? Both? we have both , but the issue with local logs under Event log.

      Are you logging violations only or all requests? we have different profile ( all request , illegal requests)

      What kind of utilization do you want to check? Connections to the VS? CPU utilization on the BIG-IP device? i don't know of this issue related to utilization, i mean i wanna check the root cause of logs issue if it is because of memory/cpu or what.

    • THE_BLUE's avatar
      THE_BLUE
      Icon for Cirrostratus rankCirrostratus

      no asmlogd is listed when above command execute, but for asm is running.

       

      • Yes, this looks OK. At least it's running.

        Do you see anything odd in the log?

        Did you check the steps and values mentioned in K05372587 and K06821426?

    • THE_BLUE's avatar
      THE_BLUE
      Icon for Cirrostratus rankCirrostratus

      yes the issue is fixed, many thanks for your support .

      • Will you please share with us how you resolved the issue?

         

        If any of my answer provided the solution, would you mind to mark it as best answer, so that this thread is marked as answered?