Forum Discussion
Mail trigger if any configuration changes done.
How to configure auto mail alart only for configuration changes made by any user. I am using BIG-IP ver 13.0. Kindly help.
- nathe
Cirrocumulus
Try this, see Configuring alerts to send email notifications to enable email and then create a custom SNMP trap, see Configuring custom SNMP traps. Then you need to enable Audit logging inthe GUI.
For the custom trap, when you make an Audit change it makes an entry similar to this:
notice mcpd[7739]: 01070417:5: AUDIT - client tmui, user admin - transaction 3514906-3 - object 0 - create { node_address { node_address_name "/Common/test1" node_address_description "" node_address_addr 2.2.2.3 node_address_conn_limit 0 node_address_ratio 1 node_address_rate_limit 0 node_address_monitor_rule "" node_address_update_status 1 } } [Status=Command OK]
So you could match on the work "transaction" perhaps to generate the trap and email?
Hope this helps,
N
- vaibhav_MD_2489
Nimbostratus
- modify /sys outbound-smtp mailhub x.x.x.x:25
- save /sys config
alert BIGIP_SHELL_BP_CONFIGURATION_LOADED{
snmptrap OID=".1.3.6.1.4.1.3375.2.4.0.28"
toaddress="myemail@mydomain.com"
fromaddress="root@device_name.in"
body="changes occurred on BigIP-1 device"
}
I'm getting mail If send manualy,but not when any configureation change occurred.
echo "mail content is here" | mail -vs "subject line" myemail@mydomain.com
getting notification logs detail on device whene edit on the text editor.but still not getting mail
Mon Feb 12 16:38:04 IST 2018noticeXXXdevecnamemcpd[4703]01070404Add a new Publication for publisherID AlertdPublisher and filterType (nil)
Mon Feb 12 16:38:02 IST 2018infoXXXdevecnameaudit_forwarder audit_forwarder started.
- vaibhav_MD_2489
Nimbostratus
Anyone please share syntax for to do so. using ver.13.0 on my device
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com