HSL::send

Description

Send data via High Speed Logging

Syntax

HSL::send <handle> <data>

HSL::send <handle> <data>

  • Sends the specified data via High Speed Logging. The handle must have been previously created with HSL::open. Note that the BIG-IP does not specifically format the data in any way, it just passes it on to the server.
  • Returns 1 if the specified data has been sent and 0 otherwise.

Examples

when CLIENT_ACCEPTED {
   set hsl [HSL::open -proto UDP -pool syslog_server_pool]
}
when HTTP_REQUEST {
   # Log HTTP request as local7.info; see RFC 3164 Section 4.1.1 - "PRI Part" for more info
   HSL::send $hsl "<190> [IP::local_addr] [HTTP::uri]\n"
}

Notes

Note that a specific pool member cannot be specified. Pool members are selected based on the algorithm of the pool.
For TCP pool members there is no way to limit or control the number of TCP connections opened to the target pool members. This can result in many connections.
Log messages are not guaranteed to arrive in the same order as they were generated.
HSL::send will not work if the publisher is configured with some formatted destinations like arcsight or splunk. If the log server expects CEF or Splunk formatted messages, the iRule should craft the data the way the server expects it to be formatted and send to a publisher configured with an unformatted destination, such as remote-high-speed-log.

Table of syslog facilities, severities and the corresponding codes

local0.emergency 128
local0.alert 129
local0.critical 130
local0.error 131
local0.warning 132
local0.notice 133
local0.info 134
local0.debug 135
local1.emergency 136
local1.alert 137
local1.critical 138
local1.error 139
local1.warning 140
local1.notice 141
local1.info 142
local1.debug 143
local2.emergency 144
local2.alert 145
local2.critical 146
local2.error 147
local2.warning 148
local2.notice 149
local2.info 150
local2.debug 151
local3.emergency 152
local3.alert 153
local3.critical 154
local3.error 155
local3.warning 156
local3.notice 157
local3.info 158
local3.debug 159
local4.emergency 160
local4.alert 161
local4.critical 162
local4.error 163
local4.warning 164
local4.notice 165
local4.info 166
local4.debug 167
local5.emergency 168
local5.alert 169
local5.critical 170
local5.error 171
local5.warning 172
local5.notice 173
local5.info 174
local5.debug 175
local6.emergency 176
local6.alert 177
local6.critical 178
local6.error 179
local6.warning 180
local6.notice 181
local6.info 182
local6.debug 183
local7.emergency 184
local7.alert 185
local7.critical 186
local7.error 187
local7.warning 188
local7.notice 189
local7.info 190
local7.debug 191

The BIG-IP API Reference documentation contains community-contributed content. F5 does not monitor or control community code contributions. We make no guarantees or warranties regarding the available code, and it may contain errors, defects, bugs, inaccuracies, or security vulnerabilities. Your access to and use of any code available in the BIG-IP API reference guides is solely at your own risk.