Bug ID 945389: Audit Log Syslog Servers do not create successfully

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IQ 1UX Monitor - Logs(all modules)

Fixed In:
7.1.0.3, 7.1.0.2

Opened: Sep 15, 2020

Severity: 3-Major

Symptoms

Audit Log Syslog Server entries do not create successfully and consequently do not send syslog events to remote syslog server, despite the entry appearing to have been created without issue. /var/log/restjavad.X.log will log Null Pointer Exceptions whenever an Audit Log Syslog Server entry is created like: [ERROR][06 May 2021 10:59:23 PDT][ RestServer] java.lang.NullPointerException at com.f5.rest.workers.configmgmtbase.auditLogger.syslogServer.SyslogClient.tryAndEstablishConnection(SyslogClient.java:263) at com.f5.rest.workers.configmgmtbase.auditLogger.syslogServer.SyslogClient.access$100(SyslogClient.java:39) at com.f5.rest.workers.configmgmtbase.auditLogger.syslogServer.SyslogClient$4.run(SyslogClient.java:283) at com.f5.rest.common.ScheduleTaskManager$2$1.run(ScheduleTaskManager.java:116) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$201(ScheduledThreadPoolExecutor.java:180) at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:748)

Impact

Audit Log Syslog Server objects appear to be created successfully however they do not transmit syslog entries to remote server due to Null Point Exception during their creation.

Conditions

Audit Log Syslog Server entries are created.

Workaround

None.

Fix Information

Audit Log Syslog Server objects can now be successfully created without raising a Null Pointer Exception. A subsequent issue now occurs which is documented in ID1017125 with a workaround of issuing "bigstart restart restjavad" once after the issue occurs.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips