Really quick answer to a question I seem to keep looking for....
Q: How do I set up my F5 Load Balancer to output syslog entries to a remote server (e.g. splunk)
A: If you have and LTM v10+
- Log in to the command line.
- To add a single remote syslog server, type a command similar to the following:
bigpipe syslog remote server {{host }}
e.g. bigpipe syslog remote server {monitor.company.com {host 192.168.99.99}}
To add multiple remote syslog servers, type a command similar to the following:
bigpipe syslog remote server {{host bigpipe syslog remote server {monitor.company.com {host 192.168.99.99} watcher.company.com {host 192.168.99.88} ... }} {host } ... }
- To save the configuration, type the following command:
bigpipe save
More information can be found at https://support.f5.com/kb/en-us/solutions/public/5000/500/sol5527.html
where there is more information about different software versions.