For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sathish_126179's avatar
sathish_126179
Icon for Nimbostratus rankNimbostratus
Mar 03, 2014

SNMP OID for object modifications by users

We have configured SNMP alerts in our F5 LTM box using the file: /etc/alertd/alert.conf. Now, there is a requirement for us to configure alerts whenever somebody disables a pool member manually. The below alerts doesn't help since it will only triggers when the health monitor status changes. alert BIGIP_MCPD_MCPDERR_POOL_MEMBER_MON_STATUS { snmptrap OID=".1.3.6.1.4.1.3375.2.4.0.10" } alert BIGIP_MCPD_MCPDERR_POOL_MEMBER_MON_STATUS_UP { snmptrap OID=".1.3.6.1.4.1.3375.2.4.0.11" } I would like to know the alert name & its corresponding SNMP trap OID for configuring alerts whenever user makes a pool member "Force offline". Already we have auditing enabled and this info. along with user ID is getting captured. Need to know how this info. can be captured in mails. Can some one throw light on this?

 

design
snmp

1 Reply

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Mar 03, 2014

    sathish,

     

    If there's nothing in the alert.conf file then I would check to see what log messages you get (/var/log/ltm) when a pool member is forced offline and configure a custom snmp alert in user_alert.conf.

     

    See the following SOL SOL3727

     

    Hope this helps,

     

    N