Operational Defect Database
BugZero found this defect 48 days ago.
Data sources
All data on this page is proprietary to BugZero® or gathered from public sources
F5 | 1562833
Qkview truncates log files without notification
Last update date:
4/26/2024
Affected products:
BIG-IP
BIG-IP AAM
BIG-IP AFM
BIG-IP APM
BIG-IP ASM
BIG-IP AVR
BIG-IP CGN
BIG-IP DDHD
BIG-IP DNS
BIG-IP GTM
BIG-IP LTM
BIG-IP PEM
Affected releases:
14.1.0
14.1.0.1
14.1.0.2
14.1.0.3
14.1.0.5
14.1.0.6
14.1.2
14.1.2.1
14.1.2.2
14.1.2.3
14.1.2.4
14.1.2.5
Fixed releases:
No fixed releases provided.
Description:
When generating a qkview on a BIG-IP system via the GUI or command line: -- Log files included in the qkview will be truncated if they exceed the maximum log file size. -- Log file truncation occurs even with the "-s 0" command line option or "Unlimited snaplen" GUI checkbox, if the log file exceeds 100MB in size. -- No user-visible notification is provided that log file truncation has occurred. ... The "Unlimited snaplen" GUI checkbox does not actually remove the maximum log file size limit of 100MB. ... Selecting the "Unlimited snaplen" GUI checkbox limits the maximum log file size to 100MB. ... Log files larger than 100MB will still be truncated, even if the "Unlimited snaplen" checkbox is selected when generating a Support Snapshot from the GUI. ... Impact ... Log files included in qkviews may be truncated unexpectedly without the user being aware. ... If additional actions are not taken to create untruncated archives of affected log files, data required to diagnose BIG-IP issue...
