Bug ID 636669: bd log are full of 'Can't run patterns' messages

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2, 12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1

Fixed In:
13.1.0, 12.1.5.1, 11.6.3.2

Opened: Jan 04, 2017

Severity: 2-Critical

Related Article: K37300224

Symptoms

The bd log are getting filled up with 'Can't run patterns' messages. A core might occur due to the i/o outage. General traffic disturbance/slowness might occur.

Impact

Potential traffic outage/slowness. 'Can't run patterns' messages filling up the bd log file.

Conditions

Configuration change that relates to attack patterns happens while there is heavy traffic.

Workaround

None.

Fix Information

Fixed log throttling issue related to attack patterns configuration change.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips