Last Modified: Nov 07, 2022
Affected Product(s):
BIG-IP AFM, APM, ASM, AVR, DNS, FPS, LTM, PEM, PSM
Known Affected Versions:
12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1
Fixed In:
13.1.0
Opened: Feb 20, 2017 Severity: 3-Major
Every 5 minutes (or avrd interval), avrd sends entire external log. If you have many BIG-IP systems, this can cause a spike in the syslog server.
All logging is done at the same avrd interval, which can overload the external log servers.
This can occur intermittently when sending AVR data to external log servers.
There is no workaround at this time.
A new DB variable was added: Avr.AddRandomDelayBeforeSnapshot. If the DB variable is set to 'enable', avrd will add a random interval before sending data to the external log server. The interval max value will be: ((avrd interval) / 2).
