Irule to external reporting tool

Hello,

 

 

You could make the log text a little more specific like this (assuming you're saving [HTTP::uri] to the $request variable in the HTTP_REQUEST event):

 

 

log local0. "5xx response from [IP::client_addr] to [IP::server_addr] for request: $request"

 

 

You could then add an entry to the user_alert.conf that looks for the string "5xx response" and generates a trap. The action for the trap could be an email alert. There are some solutions on AskF5 which detail this:

 

 

Configuring custom SNMP traps

 

Click here

 

 

Configuring SNMP trap alerts to send email notifications

 

Click here

 

 

The solutions don't mention it, but I think you need to restart alertd to initialize the change:

 

 

bigstart restart alertd

 

 

I can try posting a more complete example in a bit.

 

 

Aaron