Setting up syslog alerts to Splunk when an individual pool member becomes unavailable in virual serv

The first link is helpful and in conjunction with the following two links I believe you can configure the appropriate filter for all pool members if they go down or come back up. Please keep in mind that this will not be for a specific virtual server but for all pools having a pool member go down or up. If you look at the following link you can see that the IDs you will most likely want to filter on are 01070638 and 01070727 with a severity of notice.

https://my.f5.com/manage/s/article/K12531

In the following article you can also see the different alert severity levels if by chance you want to filter additional log levels.

https://my.f5.com/manage/s/article/K15521451

If you are ever in doubt, you can always check your current F5 logs to see what logging level the specific log is and the associated ID.

yousuf211