Manual Chapter :
Managing External Logging Devices
Applies To:
Show VersionsBIG-IQ Centralized Management
- 7.1.0
Managing External Logging Devices
About external logging devices
You can use external logging devices to collect log files from
BIG-IP devices for viewing from a web interface launched from the F5
BIG-IQ Centralized Management system. Currently, only the SevOne
Performance Log Appliance (SevOne PLA) is supported. As part of supporting external logging
devices, the BIG-IQ Centralized Management system pushes (transfers) BIG-IP device management
IP- and self IP address information to the external logging device.
You need to add an external logging device to the management system before you can use it.
You add, modify, or remove external logging devices from the management system by selecting
.Once you have added the external logging device, you need to set up authentication with the
device so that you can then launch the user interface to manage the device. You perform these
tasks by selecting
.Add external logging devices
You can add an external logging device to the F5 BIG-IQ Centralized Management system to collect log files from BIG-IP devices. Currently only the SevOne Performance Log Appliance (SevOne PLA) is supported.
- At the top left of the screen, selectSystem Managementfrom the BIG-IQ menu.
- In the list on the left, clickBIG-IQ LOGGINGand then clickExternal Logging Devices.
- ClickAdd.The Add External Logging Device screen opens.
- Type a name and an optional description for the external logging device.
- Type the connection information for the SevOne PLA device.
- Specify the IP address of the external logging device in theIP Addressfield. If the external logging device is also a query server, select theUse as query servercheck box to the right of theIP Addressfield. Query servers are members of the SevOne PLA logging device cluster that process user queries.
- In theUser Namefield, specify the user name of the account used to securely access the SevOne PLA device.
- In thePasswordfield, specify the password for the selected account .
- Once the connection information is complete, clickTestto verify that the connection information can be used to access the SevOne PLA device. If the test is successful, a green check mark and the textConnection Establishedare shown in the Test Connection row.
- Type the query server information for the device.
- Add the first query server IP address in theIP Addressfield.
- Add additional query servers by clicking the+to the right of the description and then supplying an IP address for each in the createdIP Addressfields.
- Remove query servers by clicking theXto the right of the query server to remove.
- Optionally, select theEnabledcheck box in theStatussetting to allow scheduling for data pushes from the BIG-IQ Centralized Management system to the SevOne PLA device, and to enable editing for the other fields in this area.
- To have the data pushed every day,for thePush Frequencysetting, selectDaily.
- To push the data once a month, in thePush Frequencysetting, selectMonthly, and then select the day of the month.
- To push the data each week, in thePush Frequencysetting, selectWeeklyand then select one or more days of the week.
- Specify when to begin, and optionally end, the scheduled data push.Select the date and time using the calendar tool, or type the date, hour, and minute to use. By default,No End Dateis selected and must be cleared to specify an end time.
- ClickPush Nowin theLast Push Datesetting to manually push the data to the external logging device.
- ClickAddto save your changes.After you successfully add your changes, the screen shows theLast Push Datesetting. You can use thePush Nowbutton in that row to manually push data to the external logging device.
The external logging device is added to the BIG-IQ Centralized Management system.
You can now configure authentication with the external logging device so that you can manage logs using the SevOne PLA user interface.
Modify external logging devices
You can modify settings for external logging devices used with the F5 BIG-IQ Centralized Management system when the computing environment changes.
- At the top left of the screen, selectSystem Managementfrom the BIG-IQ menu.
- In the list on the left, expandBIG-IQ LOGGINGand then clickExternal Logging Devices.
- Click the name of the external logging device to modify.The External Logging Device (device-name) screen opens.
- Modify the description for the external logging device, as needed.
- Modify the connection information for the SevOne PLA device, as needed.
- Specify the IP address of the external logging device in theIP Addressfield. If the external logging device is also a query server, select theUse as query servercheck box to the right of theIP Addressfield. Query servers are members of the SevOne PLA logging device cluster that process user queries.
- Specify the user name of the account used to securely access the SevOne PLA device in theUser Namefield.
- Specify the password for the selected account in thePasswordfield.
- ClickTestonce the connection information is complete to verify that the connection information can be used to access the SevOne PLA device. If the test is successful, a green check mark and the textConnection Establishedare shown in theTest Connectionsetting.
- Modify the query server information for the device, as needed.
- Add the first query server IP address in theIP Addressfield.
- Add additional query servers by clicking the+to the right of the description and then supplying an IP address for each in the createdIP Addressfields.
- Remove query servers by clicking theXto the right of the query server to be removed.
- Optionally, select theEnabledcheck box in theStatussetting to allow data pushes from the BIG-IQ Centralized Management system to the SevOne PLA device to be scheduled and to enable the other fields in this area for editing.
- SelectDailyin thePush Frequencysetting to have the data pushed every day.
- SelectMonthlyin thePush Frequencysetting and then select the day of the month to push the data once a month.
- SelectWeeklyin thePush Frequencysetting and then select one or more days of the week to push the data each week.
- Specify when to begin, and optionally end, the scheduled data push.Select the date and time using the calendar tool, or type the date, hour, and minute to use. By default,No End Dateis selected and must be cleared to specify an end time.
- ClickSaveto save your changes.You can use thePush Nowbutton in theLast Push Datesetting to manually push the data to the external logging device.
The external logging device is updated in the BIG-IQ Centralized Management system.
Depending on the changes you made, you may need to configure authentication with the external logging device so that you can manage logs using the SevOne PLA user interface.
Remove external logging devices
You can remove external logging devices from the F5 BIG-IQ Centralized Management system when those devices are no longer needed.
- At the top left of the screen, selectSystem Managementfrom the BIG-IQ menu.
- In the list on the left, clickBIG-IQ LOGGINGand then clickExternal Logging Devices.
- Click the check box to the left of the name of the external logging device to remove.
- ClickRemove.A dialog box opens, asking you to confirm that you want to remove the device.
- ClickDeletein the dialog box.
The device is removed and is no longer seen in the list of devices.
Request authentication token for external logging devices
You must add the external logging device to theF5 BIG-IQ Centralized Management system before you can request an authentication token for it.
You request an authentication token for the external logging device so you can access the web interface to the external logging device and the BIG-IP device logs stored there.
- At the top left of the screen, selectNetwork Securityfrom the BIG-IQ menu.
- From the menu at the top clickMonitoring, and then on the left clickExternal Logging Devices.
- Request an authentication token by clicking the link displayed in the Auth token column for the appropriate external logging device.
- If you do not have an authentication token to access the SevOne PLA, you request it by clickingRequest Auth Token.
- If you want to replace an existing authentication token, you request a new one by clickingManage Auth Token.
The Manage SevOne PLA Authentication Token dialog box opens. - Type the user name and password for an account with privileges to use the web interface to the SevOne PLA device.
- ClickRequest Token.A new authentication token is sent from the SevOne PLA device, and the new token string is displayed.
- ClickSaveto save the token and close the dialog box.
The authentication token is created and is used when you launch the SevOne PLA user interface.
Delete authentication token for external logging devices
You must have an authentication token before you can delete it.
You delete authentication tokens with an external logging device when then are no longer needed or should be replaced.
- At the top left of the screen, selectNetwork Securityfrom the BIG-IQ menu.
- From the menu at the top clickMonitoring, and then on the left clickExternal Logging Devices.
- Click the check box to the left of the external logging device that should have the authentication token removed.
- ClickDelete Auth Token.
You no longer have an authentication token for the external logging device. You will need to request a new authentication token to communicate with the external logging device user interface.
Access external logging devices
You must add the external logging device to the F5 BIG-IQ Centralized Management system before you can access it. You must also have authenticated your account with the external logging device.
You access and launch the web interface to the external logging device to access the BIG-IP device logs stored there.
- At the top left of the screen, selectNetwork Securityfrom the BIG-IQ menu.
- At the top clickMonitoring, and then on the left clickExternal Logging Devices.
- In the External Device column, clickLaunchfor the appropriate external logging device.The SevOne PLA user interface opens.
You can now use SevOne PLA to review the BIG-IP device logs.