Forum Discussion

Dayal_141213's avatar
Dayal_141213
Icon for Nimbostratus rankNimbostratus
Jan 14, 2015

Is it possible to send out email alerts for all VS changes being made?

Hi All, I have a requirement where I need to get email alerts for changes being made on LTM vservers (create, modify and delete). I am trying to achieve this through the user_alert.conf. I have done...
BIG-IP Access Policy Manager (APM)
management
security
TMOS
TMSH
Dayal_141213's avatar
Dayal_141213
Icon for Nimbostratus rankNimbostratus
Jan 18, 2015

Well, seems like I have reached a conclusion that the audit logs are not part of Syslog. The audit log format in the F5 shows the following fields: Timestamp : UserName : Transaction : Event

 

contrary to the normal syslog fields Timestamp : LogLevel : Host : Service : Status Code : Event

 

I tried to log message using the logger with priority local0 and it went to ltm logs local1 and it went to em logs local2 and it went to gtm logs local3 and it went to asm logs local4 --it should be going to apm (mine was not licensed) local5 and it went to pktfilter logs

 

But I could not find anything logging anything under audit logs(local6 or local7)

 

What is left is to try and trigger the same custom alert on ltm and see if it works.