Forum Discussion

Kris_20135's avatar
Kris_20135
Icon for Nimbostratus rankNimbostratus
Aug 08, 2012

F5 E-mail alerting

Does anyone know if there is a way to setup F5 e-mail alerts anytime someone makes a change in the configuration? Currently using LTMs on v10.
management
monitoring

5 Replies

Sort By
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Aug 08, 2012
    Hi Kris,

     

     

    You could set up email and DNS resolution, enable audit logging on MCP and bigpipe and then configure a custom filter on syslog-ng for parsing the audit log. There are individual solutions on AskF5 for these steps. Try searching there and reply here if you get stuck.

     

     

    Aaron
  • K-Dubb's avatar
    K-Dubb
    Icon for Nimbostratus rankNimbostratus
    Aug 09, 2012
    I actually asked this same question to support. They said the Bigip has an snmp trap for it, and that i could use the alert.conf file to configure it to send email alerts. I am already doing this for other alerting. Here is the trap:

     

     

    Name bigipConfigLoaded

     

    OID .1.3.6.1.4.1.3375.2.4.0.28

     

     

    Have not tried it yet.

     

  • haridas_175080's avatar
    haridas_175080
    Icon for Nimbostratus rankNimbostratus
    Nov 28, 2014

    did you get any update on this. im also looking the same change to setup a config change alert in f5. anyone who made changes on f5 i need to get an alert through email.

     

    • vaibhav_MD_2489's avatar
      vaibhav_MD_2489
      Icon for Nimbostratus rankNimbostratus
      Feb 12, 2018

      hi if you get any syntax please refer to me, thank a lot in advance

       

  • Snl's avatar
    Snl
    Icon for Cirrostratus rankCirrostratus
    Feb 13, 2018

    refer this link

    https://devcentral.f5.com/questions/snmp-traps-for-configuration-changes-55096

    hope below helps

    alert testsnmp "cmd_data=create ltm virtual"
alert testsnmp "cmd_data=modify ltm virtual"
alert testsnmp "cmd_data=delete ltm virtual"
alert testsnmp "cmd_data=create ltm pool"
alert testsnmp "cmd_data=modify ltm pool"
alert testsnmp "cmd_data=delete ltm pool"


alert config-change "cmd_data=create ltm virtual" {
   snmptrap OID=".1.3.6.1.4.1.3375.2.4.0.300"
email toaddress="test@abc.com"
body="LTM VS is created on "
}
}


alert config-change "cmd_data=modify ltm virtual" {
   snmptrap OID=".1.3.6.1.4.1.3375.2.4.0.301"
}

alert config-change "cmd_data=delete ltm virtual" {
   snmptrap OID=".1.3.6.1.4.1.3375.2.4.0.302"
}


alert config-change "cmd_data=create ltm pool" {
   snmptrap OID=".1.3.6.1.4.1.3375.2.4.0.303"
}

alert config-change "cmd_data=modify ltm pool" {

   snmptrap OID=".1.3.6.1.4.1.3375.2.4.0.304"
}

alert config-change "cmd_data=delete ltm pool" {
   snmptrap OID=".1.3.6.1.4.1.3375.2.4.0.305"
}

    Cheers