f5-declarative-onboarding icon indicating copy to clipboard operation
f5-declarative-onboarding copied to clipboard

Expand SyslogRemoteServer schema to support Include attribute

Open megamattzilla opened this issue 4 years ago • 0 comments

Unable to filter remote syslog messages

In TMOS its possible to filter messages to a remote syslog server using the Include attribute in the TMOS syslog TMSH configuration: https://support.f5.com/csp/article/K13333

Expand SyslogRemoteServer schema to support Include attribute

Along with declaring host/remotePort for remote syslog server one could also declare an include statement to filter the messages sent to remote syslog server.

Example include statement in TMSH syntax:

    filter f_remote_loghost {
        level(warning..emerg);
    };
    destination d_remote_loghost {
        tcp(\"10.11.16.253\" port(1468));
        udp(\"10.11.16.252\" port(514));
    };
    log {
        source(s_syslog_pipe);
        filter(f_remote_loghost);
        destination(d_remote_loghost);
    };

*The above can be flattened to one-line if needed.

megamattzilla avatar Jun 16 '21 18:06 megamattzilla