alloyloki

AST with alloy, loki

Promtail is being depricated, but you can use the Alloy container to convert the config to Alloy.

Configure BIG-IP to send syslogs to Alloy for processing to be ingested by Loki and further Grafana.

F5 rfc5424

Link

Example

sys syslog {
    include "destination remote_server {udp(10.1.1.10 port (514) localip(10.1.1.4) flags(syslog-protocol));};filter f_alllogs {level (debug..emerg);};log {source(local);filter(f_alllogs);destination(remote_server);};"
    remote-servers {
        remotesyslog2 {
            host 10.1.1.10
        }
    }
}

Must create

• Alloy Pool

• Log Publisher

• Log Destination

• Access Event Log Settings (see images)