Last Modified: May 29, 2024
Affected Product(s):
BIG-IP LTM
Known Affected Versions:
14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5
Fixed In:
15.0.0, 14.1.0.6
Opened: Mar 28, 2019 Severity: 3-Major
With a fresh install of v14.1.0.x, you attempt to enable monitor logging for a node or pool member, an error message appears in /var/log/ltm. Also the log file to be created fails to be created. This behavior is due to SELinux changes. /var/log/auditd/audit.log show the SELinux violations logs. System reports messages similar to the following in /var/log/ltm: -- info bigd[12457]: Couldn't open logging file /var/log/monitors/Common_Splunk_HTTP_monitor-Common_node1-8088.log for monitor /Common/Splunk_HTTP_monitor on node /Common/node1.
Monitor logging fails. Error messages logged.
-- Clean installation of v14.1.0.x software. -- Enable monitor logging for a node or pool member.
None.
Updated bigd SELinux rules to allow the monitor log file creations.