TCP syslog server is not reachable for F5

Vendor

F5

Description

Indeni will alert if one of the Syslog servers configured for use over TCP is not responding.

Remediation Steps

Verify that the firewall is allowing the traffic and that the syslog service is running.

How does this work?

This alert logs into the F5 device through SSH, parses the output of the command "tmsh list sys syslog", extracts the configured tcp syslog servers and test the connection to them.

Why is this important?

This alert logs into the F5 device through SSH, parses the output of the command "tmsh list sys syslog", extracts the configured tcp syslog servers and test the connection to them.

Without Indeni how would you find this?

An administrator could could periodically log into the device through SSH, enter TMSH and execute the command "list sys syslog" in order to identify the configured syslog servers. For each syslog server using TCP he could then test the connectivity by issuing the command "nc -v -z ".


View Source Code