For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

yousuf211's avatar
yousuf211
Icon for Nimbostratus rankNimbostratus
May 20, 2023

Setting up syslog alerts to Splunk when an individual pool member becomes unavailable in virual serv

Hi Team, We are trying to setup alerts to Splunk so that in case any member becomes unavailable for any reason within a particular virtual server then we can see it on Splunk. There is recommended w...
event
Paulius's avatar
Paulius
Icon for MVP rankMVP
May 21, 2023

The first link is helpful and in conjunction with the following two links I believe you can configure the appropriate filter for all pool members if they go down or come back up. Please keep in mind that this will not be for a specific virtual server but for all pools having a pool member go down or up. If you look at the following link you can see that the IDs you will most likely want to filter on are 01070638 and 01070727 with a severity of notice.

https://my.f5.com/manage/s/article/K12531

In the following article you can also see the different alert severity levels if by chance you want to filter additional log levels.

https://my.f5.com/manage/s/article/K15521451

If you are ever in doubt, you can always check your current F5 logs to see what logging level the specific log is and the associated ID.

yousuf211