Configuring an F5 BIG-IP Server

Firmware: 9.x, 10.x

CollectorA TLC module that gathers or receives log messages from Log Sources.: Network CollectorA type of Collector that listens for Syslog and SNMP-based log messages from network devices. - Syslog

If your F5 BIG-IP Server uses Syslog-ng, complete the steps in Configuring a Syslog-ng Module.

If your F5 BIG-IP Server uses Syslog, complete the following steps to configure the server to send log messages to TLC:

1.

Log in to the command line.

2.

Enter the appropriate Configuration command for your version of F5 BIG-IP (see Table 129), where:

<name> is the name of the Syslog server,

<manager_ip> is the host name or IP address of the TLC ManagerTripwire LogCenter Manager is the core software in your TLC environment. TLC Manager collects and processes log messages from a wide variety of systems and devices. that will collect log messages from this Log SourceAny log-generating application, operating-system service, database instance, or device from which TLC collects log messages., and

<port> is the port with which the TLC Manager will listen for log messages (either 1468 for TCP, or 514 for UDP).

3.

Enter the appropriate Save command for your version of F5 BIG-IP (see Table 129).

Table 129. Commands for F5 BIG-IP servers

F5 BIG-IP version	Configuration command	Save command
10.2.2	bigpipe syslog remote server {<name> {host <manager_ip>}}	bigpipe save all
10.1.0 to 10.2.1	bigpipe syslog remote server {<name> {host <manager_ip>}} or tmsh modify sys syslog remote-servers add {<name> {host <manager_ip> remote-port <port>}}	bigpipe save or tmsh save sys config
10.0.0 to 10.0.x	bigpipe syslog remote server {<name> {host <manager_ip>}}	bigpipe save
9.4.2 to 9.4.8	bigpipe syslog remote server <manager_ip>	bigpipe save

Next	If you are performing initial configuration of your TLC environmentConsists of all TLC software, Managers, Log Sources, Monitored Assets, Collectors, and data in your TLC installation., see Configuring your TLC Environment. Otherwise, see Adding a Monitored Asset for a new Log Source.