Bug ID 646563: AVR external log should have the option to start publishing at random time

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP AFM, APM, ASM, AVR, DNS, FPS, LTM, PEM, PSM(all modules)

Known Affected Versions:
12.1.2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1

Fixed In:
13.1.0

Opened: Feb 20, 2017

Severity: 3-Major

Symptoms

Every 5 minutes (or avrd interval), avrd sends entire external log. If you have many BIG-IP systems, this can cause a spike in the syslog server.

Impact

All logging is done at the same avrd interval, which can overload the external log servers.

Conditions

This can occur intermittently when sending AVR data to external log servers.

Workaround

There is no workaround at this time.

Fix Information

A new DB variable was added: Avr.AddRandomDelayBeforeSnapshot. If the DB variable is set to 'enable', avrd will add a random interval before sending data to the external log server. The interval max value will be: ((avrd interval) / 2).

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips