Forum Discussion

bsb's avatar
bsb
Icon for Nimbostratus rankNimbostratus
Dec 29, 2017

iRule to trigger email for captured logs

team, have an iRule for capturing logs which works as expected. now i would like to send the log which was captured with commment.   irule used when CLIENT_ACCEPTED { if { not [class match [IP::cl...
BIG-IP
iRules
security
nitass's avatar
nitass
Icon for Employee rankEmployee

yes, its already configured and works well for all VIP (up/down/disable/enabled), also other device parameters.

 

can you post the /config/user_alert.conf?

 

jaikumar_f5's avatar
jaikumar_f5
Icon for MVP rankMVP
Dec 29, 2017

@Saravanan,

You are required to add new snmp trap in the alert conf file. Refer this article and configure your log string. something like below, but i'm not sure of the ip:port logic, does it need regex.

alert Reject_request_alert "Rejecting this request (%s:%d) " {
snmptrap OID=".1.3.6.1.4.1.3375.2.4.0.301";
email toaddress="xxx@xxx.com"
fromaddress="yyy@yyy.com"
body="Rejecting this request (%s:%d)"
}

I referred the /etc/httpd/run/bigip_error_maps.dat file, so the above should be okay.