NAT

See attachments

We are the receivers of the “session” syslog output from the F5 that is manually configured and associated with the pool and or policy. The underlying hardware is specially there for the parallel process of High speed logging

To configure below is the config guide from F5

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-external-monitoring-implementations-12-1-2/2.html

client_ip = (.+?) client_port = (.+?) \nvirtual_ip = (.+?) virtual_name = \/Common\/(.+?)Gigaflow\s+\nvirtual_pool_name.*server_ip = \n(.+?) server_port = (.+?) snat_port = \n(.+?) snat_ip = (.+?) http_path = \n"(.+?)" http_request = "(.+?) .*\nresponse_msecs = (.+?) response_size = \n(.+?) virtual_port = (.+)