Symptoms
iRule "log" command fails with errors similar to:
Jul 28 10:44:44 bigip1 err tmm3[1719]: 01220001:3: TCL error: /Common/rule_log <CLIENT_CLOSED> - Traffic rejected (line 2) (line 2)
invoked from within "log -noname 192.0.2.1:514 'log message'"
Impact
-- After buffering a limited number of messages, "log" command begins failing. This generates TCL errors.
Conditions
-- iRule that uses "log" to target a remote destination, e.g.: "log 192.0.2.1 'log message'"
-- No route to specified remote log destination, or some other issue that causes an initial connection attempt to fail.
Workaround
One of the following:
1. Log to local syslog, and configure syslog-ng to log to remote servers.
2. Use High-Speed Logging (https://clouddocs.f5.com/api/irules/HSL.html), instead of the "log" command.
3. Ensure the BIG-IP always has routes to specified remote syslog destinations.
