Bug ID 766293: Monitor logging fails on v14.1.0.x releases

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5

Fixed In:
15.0.0, 14.1.0.6

Opened: Mar 28, 2019

Severity: 3-Major

Symptoms

With a fresh install of v14.1.0.x, you attempt to enable monitor logging for a node or pool member, an error message appears in /var/log/ltm. Also the log file to be created fails to be created. This behavior is due to SELinux changes. /var/log/auditd/audit.log show the SELinux violations logs. System reports messages similar to the following in /var/log/ltm: -- info bigd[12457]: Couldn't open logging file /var/log/monitors/Common_Splunk_HTTP_monitor-Common_node1-8088.log for monitor /Common/Splunk_HTTP_monitor on node /Common/node1.

Impact

Monitor logging fails. Error messages logged.

Conditions

-- Clean installation of v14.1.0.x software. -- Enable monitor logging for a node or pool member.

Workaround

None.

Fix Information

Updated bigd SELinux rules to allow the monitor log file creations.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips