Bug ID 725612: syslog-ng does not send any messages to the remote servers after reconfiguration

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 14.0.0, 14.0.0.1, 14.0.0.2

Fixed In:
14.1.0, 14.0.0.3, 13.1.1.2

Opened: Jun 25, 2018

Severity: 4-Minor

Symptoms

Changing syslog remote server IP address (tmsh sys syslog remote-servers) requires a syslog-ng process restart to take effect. Syslog operations do not use the new remote destination address on syslog service reconfiguration.

Impact

After reconfiguring remote syslog host IP addresses, syslog messages continue to be sent to the previously configured addresses.

Conditions

1. Add a Remote Syslog server (Server A) using System :: Logs :: Configuration :: Remote Syslog. 2. Click Update (Syslog messages go out toward Server A). 3. Remove Server A from configuration. 4. Add new Server B (different IP address). 5. Click Update.

Workaround

Restart the syslog service using the following command: bigstart restart syslog-ng Messages will now properly be sent toward Server B (the new IP address).

Fix Information

Syslog operations now use the new remote destination address on syslog service reconfiguration.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips