For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

smp_86112's avatar
smp_86112
Icon for Cirrostratus rankCirrostratus
Jul 29, 2008

Custom SNMP Traps - clarify "match string" usage

Reference the article posted by deb a few days ago:   http://devcentral.f5.com/Default.aspx?tabid=63&articleType=ArticleView&articleId=256     After reading this article, I...
management
monitoring
smp_86112's avatar
smp_86112
Icon for Cirrostratus rankCirrostratus
Jul 30, 2008
I think I understand the what the two conf files are used for. And I think I understand this which is stated very clearly:

 

alertd looks in bigip_error_maps.dat to find the alert code, and if found, uses the corresponding alert name to map back to the alert definition in alert.conf.

 

 

What I am having difficulty grasping is this:

 

The system will also match on any match strings explicitly defined in either conf file and execute the defined alert action.

 

 

Let me try a different approach to my question: does alertd look for a match string in the bigip_error_maps.dat file when it receives a message from syslog-ng?