For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Shane_Terrick_9's avatar
Shane_Terrick_9
Icon for Nimbostratus rankNimbostratus
May 13, 2013

Health monitor email when node disabled

We have been having some servers be marked offline and woudl like to know immediately when this happens.

 

 

Is there a way to add an email alert to the heatlth monitor so we can be emailed when a server is marked offline.

 

 

We are using a simple ping test to make sure the server is up.

 

 

Any help is greatlt appreciated.

 

management
monitoring

8 Replies

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    May 13, 2013
    To configure email delivery of alerts edit the /etc/ssmtp/ssmtp.conf file and enter the hostname or IP address of a suitable SMTP server as the mailhub= variable value.

     

     

    To configure which events result in an alert email, as well as custom SNMP traps, edit the /config/user_alert.conf according to http://support.f5.com/kb/en-us/solutions/public/3000/600/sol3667.html and http://support.f5.com/kb/en-us/solutions/public/3000/700/sol3727.html.
  • Shane_Terrick_9's avatar
    Shane_Terrick_9
    Icon for Nimbostratus rankNimbostratus
    May 13, 2013
    I added the following to the /config/user_alert.conf file

     

     

     

    alert CHP_XR_NODE_DOWN "Node 10.25.65.86 monitor status down" {

     

    snmptrap OID=".1.3.6.1.4.1.3375.2.4.0.504";

     

    email toaddress="terricksa@xxxx.com"

     

    fromaddress="root@bigip.com"

     

    body="There is a Node DOWN in CHP XR TST!"

     

    }

     

     

    I then rebooted the node to cause the node to go down as seen in the ltm log, but did not get the error when it did go down in the log.

     

     

     

    May 13 13:14:19 LTM1 notice mcpd[3485]: 01070640:5: Node 10.25.65.86 monitor status down.

     

     

     

    I was able to successfully test the TRAP with the logger command(recieved the email quickly)

     

    logger -p local0.warning "Node 10.25.65.86 monitor status down"

     

     

     

    Am I missing cycling something or since I rebooted, did it happen too quickly?

     

     

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    May 13, 2013
    I'm confused. What didn't happen, the trap or the email or both? A local log entry was certainly created.
  • Shane_Terrick_9's avatar
    Shane_Terrick_9
    Icon for Nimbostratus rankNimbostratus
    May 13, 2013
    The email did not fire when i rebooted the server, but it definitely showed down in the log.. sorry for the confusion hope that helps
  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    May 13, 2013
    OK, so did you do the SMTP bit that linked off the second article to configure SMTP, not just SNMP: http://support.f5.com/kb/en-us/solutions/public/13000/100/sol13180.html
  • Shane_Terrick_9's avatar
    Shane_Terrick_9
    Icon for Nimbostratus rankNimbostratus
    May 13, 2013
    Yes. that is completed. I have gotten other email from tests. just not when i thought i got this trap to fire.
  • Shane_Terrick_9's avatar
    Shane_Terrick_9
    Icon for Nimbostratus rankNimbostratus
    May 15, 2013
    Alright first off, thanks for all the help. I now have the alerts firinig correctly, but one last question.

     

     

    Is there a way to modifiy the subject of the email alert? I modified the sender and reciever and the body but now the subjects is getting flagged by my Outlook as Junk. I can make an exception but if we get new hires it may get flagged in their email (if we forget to add an exception), we send the alerts to a dist group.