F5 | 880565

Impact ... Audit log file contains numerous 'cmd_data=list cm device recursive' messages. ... Conditions ... This occurs during normal operation. ... Workaround ... -- To suppress all messages, do the following: 1. ... Edit the 'include' section of syslog configuration to suppress audit logs of 'cmd_data=cd /' and 'cmd_data=list cm device recursive': # tmsh edit /sys syslog all-properties 2. ... Replace 'include none' with following syntax: === sys syslog { - snip - include " filter f_audit { facility(local0) and match(AUDIT) and not match(\"cmd_data=list cm device recursive|cmd_data=cd /\"); };" - snip - } -- To filter the messages sent to existing remote syslog servers, do the following: 1. ... Set sys syslog remote-servers none: # tmsh modify sys syslog remote-servers none 2. ... Define the remote syslog server in the 'sys syslog include' statement. ... 3. Add the following filter: filter f_remote_server { not (facility(local0) and message(\"AUDIT\") and match(\"cmd_data=list cm ...