Forum Discussion
NimbostratusEmail alerts for changes in LTM Policies
Hi Experts
I would like to get an email alert in case there are any changes made in LTM (Modification and creation of pool members , node , virtual server , health monitor etc) .The email alerts are already configured for some of the events ; however I would like to know the specific event for changes in LTM.
Ankur
2 Replies
Ankur_5273Hi Experts
Kindly assist on this
Ankur
I am not sure if there is anything built-in for this. I thought you might be able to leverage the alertd daemon, but it seems to only work on SNMP traps. https://support.f5.com/kb/en-us/solutions/public/3000/600/sol3667.html
You will have to turn on audit logging (aka MCP audit logging) to start. See the documentation at https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-concepts-11-4-0/11.html
I would recommend as an alternative to configuring this solution on the BIG-IP, to use some sort of log parsing tool to parse syslog traffic, looking specifically for the data that would be logged to /var/log/audit on your BIG-IP. A few examples would be splunk, Nagios, or logstash.
