Difference between type of events in F5-

System events

System event messages are based on Linux events, and are not specific to the BIG-IP system.

Packet filter events

Packet filter messages are those that result from the implementation of packet filters and packet-filter rules.

Local traffic events

Local-traffic event messages pertain specifically to the local traffic management system.

Audit events

Audit event messages are those that the BIG-IP system logs as a result of changes to the BIG-IP system configuration. Logging audit events is optional.

To configure and manage event logging, log in to the BIG-IP Configuration utility, and on the Main tab, expand System, and click Logs.

As described in Introducing BIG-IP system logging, the BIG-IP system automatically logs four main event types: system, packet filter, local traffic, and configuration changes (audit). Each type of event is stored in a separate log file, and the information stored in each log file varies depending on the event type. All log files for these event types are in the directory /var/log.

Logging system events

Many events that occur on the BIG-IP system are Linux-related events, and do not specifically apply to the BIG-IP system.

Using the Configuration utility, you can display these system messages. The table below shows some sample system log entries