Forum Discussion
Edher_Espinosa1
Nimbostratus
NimbostratusiRule with custom SNMP TRAP evertytime it matches, NOT every minute
The idea here is to log a malicious IP, i've created an SNMP TRAP for everytime this IPs get connected, I've created an iRules as well with a DataGroup "dg_mx" and works fine!
Heres the iRule: ...
Amit_Karnik_269Nimbostratus
NimbostratusHave you considered using HSL to send the logs to your SIEM or eventing system ?
Optionally you could keep track of occurrences using a "table - subtable" and reporting the data every 5 minutes.
cheers.
