The BIG-IP Administrator has to investigate an issue with an HTTP virtual server.

For an issue involving an HTTP virtual server, the first log file to check is /var/log/ltm . A BIG-IP virtual server is an LTM traffic-management object, and runtime events related to virtual servers, pools, pool members, monitors, availability changes, and traffic-management behavior are normally written to the LTM log. /var/log/httpd/httpd_errors is not the correct first choice because it relates to the BIG-IP Configuration Utility web service, not to an HTTP application virtual server processing client traffic. /var/log/audit records administrative configuration changes, such as who modified an object and when. /var/log/messages contains broader system-level messages but is not the primary LTM troubleshooting log. Therefore, when the problem statement specifically says an HTTP virtual server is having an issue, the control-plane troubleshooting path starts with /var/log/ltm .

=========