All Apps and Add-ons

App for A10 Networks

Explorer

Hi,

Anyone have experienced any issus with the App for A10 Networks, more precisely with SLB?

I have been using the Aflex default file on my A10 Load Balancer, distributed with the APP, but some values on dashboards appears completely out of order and without any context.

I believe that the problem is related with the form that the Aflex format the string for logging.

// Format strings for logging
set logstr "$datetimerequest $cip $sip $sport $csmethod $csuristem $csuriquery $nip $nport $scstatus $scbytes $csbytes $finaltimetaken $csuseragent $csreferer"

Any Tip?

sincerely

VML

0 Karma

New Member

Our dashboards were logging the time stamps as IP addresses. To resolve the issue we changed the props file extraction to EXTRACT-time to {8} from {6} then changed the other EXTRACT fields so they were higher than the previous EXTRACT {} field.

New props.

EXTRACT-date = (?i)loggingw3c:(?P[^ ]+)
EXTRACT-time = (?i)^(?:[^ ]* ){8}(?P[^ ]+)
EXTRACT-c
ip = (?i)^(?:[^ ]* ){9}(?P[^ ]+)
EXTRACT-sip = (?i)^(?:[^ ]* ){10}(?P[^ ]+)
EXTRACT-s
port = (?i)^(?:[^ ]* ){11}(?P[^ ]+)
EXTRACT-csmethod = (?i)^(?:[^ ]* ){12}(?P[^ ]+)
EXTRACT-cs
uristem = (?i)^(?:[^ ]* ){13}(?P[^ ]+)
EXTRACT-cs
uriquery = (?i)^(?:[^ ]* ){14}(?P[^ ]+)
EXTRACT-n
ip = (?i)^(?:[^ ]* ){15}(?P[^ ]+)
EXTRACT-nport = (?i)^(?:[^ ]* ){16}(?P[^ ]+)
EXTRACT-sc
status = (?i)^(?:[^ ]* ){17}(?P[^ ]+)
EXTRACT-scbytes = (?i)^(?:[^ ]* ){18}(?P[^ ]+)
EXTRACT-cs
bytes = (?i)^(?:[^ ]* ){19}(?P[^ ]+)
EXTRACT-finaltimetaken = (?i)^(?:[^ ]* ){20}(?P[^ ]+)
EXTRACT-csuseragent = (?i)^(?:[^ ]* ){21}(?P[^ ]+)
EXTRACT-cs
referer = (?i)^(?:[^ ]* ){22}(?P[^ ]+)

0 Karma