Bug ID 463468: failed tmsh command generate double logs

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
10.2.1, 10.2.4, 11.4.1, 11.5.0, 11.5.1, 11.5.2, 11.5.3

Fixed In:
11.6.0, 11.5.4, 11.4.1 HF9

Opened: May 20, 2014

Severity: 3-Major

Related Article: K16468

Symptoms

A single failed tmsh command generates two identical audit logs, and audit_forwarder sends two logs to audit server (TACACS+ in this example).

Impact

Here is an example of the failure: tmsh create ltm pool pool20 01020066:3: The requested pool (/Common/pool20) already exists in partition Common Tue May 20 16:27:17 2014 10.10.10.201 root unknown unknown update service=system protocol=ip task_id=130start_time=1400627369 event=cmd_acct reason=May 20 16:09:29 aftest notice tmsh[20175]: 01420002:5: AUDIT - pid=20175 user=root folder=/Common module=(tmos)# status=[01020066:3: The requested pool (/Common/pool20) already exists in partition Common.] cmd_data=create ltm pool pool20 Tue May 20 16:27:17 2014 10.10.10.201 root unknown unknown update service=system protocol=ip task_id=132start_time=1400627369 event=cmd_acct reason=May 20 16:09:29 aftest notice tmsh[20175]: 01420002:5: AUDIT - pid=20175 user=root folder=/Common module=(tmos)# status=[01020066:3: The requested pool (/Common/pool20) already exists in partition Common.] cmd_data=create ltm pool pool20

Conditions

tmsh audit is on and tmsh command is failed from mcpd validation. This does not occur with successful commands.

Workaround

None.

Fix Information

Failed tmsh command no longer generates double logs.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips