Bug ID 1017125: Audit Log Syslog Servers do not send messages to remote syslog servers

Last Modified: Jun 10, 2021

Bug Tracker

Affected Product:  See more info
BIG-IQ 1UX Monitor - Logs(all modules)

Known Affected Versions:
7.1.0, 7.1.0.1, 7.1.0.2, 7.1.0.3, 7.1.6, 7.1.6.1, 7.1.7, 7.1.7.1, 7.1.7.2, 7.1.8, 7.1.8.1, 7.1.8.2, 7.1.8.3, 7.1.8.4, 7.1.8.5, 7.1.9, 7.1.9.7, 7.1.9.8, 7.1.9.9, 8.0.0, 8.0.0.1

Opened: May 09, 2021
Severity: 4-Minor

Symptoms

Audit Log Syslog Server entries will not transmit messages to remote syslog servers despite their configuration and creation appearing successful and the remote syslog server being fully reachable. /var/log/restjavad.X.log will log constraint messages like: [INFO][06 May 2021 05:36:09 PDT][/cm/adc-core/audit-logger AdcAuditLoggerCollectionWorker] Did not find own device , continue... [INFO][06 May 2021 05:36:09 PDT][/cm/global/audit-logger GlobalAuditLoggerCollectionWorker] Did not find own device , continue... [INFO][06 May 2021 05:36:09 PDT][/cm/shared/audit-logger SystemAuditLoggerCollectionWorker] Did not find own device , continue... [INFO][06 May 2021 05:36:09 PDT][/cm/firewall/audit-logger FWAuditLoggerCollectionWorker] Did not find own device , continue... [INFO][06 May 2021 05:36:10 PDT][/cm/access/audit-logger AccessAuditLoggerCollectionWorker] Did not find own device , continue...

Impact

BIG-IQ does not transmit messages to remote syslog servers and constantly logs "Did not find own device , continue..." messages to /var/log/restjavad.x.log.

Conditions

Software version containing ID945389 fix (8.0.0 and later or an earlier EHF).

Workaround

Issue "bigstart restart restjavad" once after observing condition. Messages will cease and syslog entries will successfully be transmitted to valid remote syslog servers.

Fix Information

None

Behavior Change