For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jeremy_Bridges_'s avatar
Jeremy_Bridges_
Icon for Nimbostratus rankNimbostratus
Aug 04, 2009

Trap SNMP events in SCOM

Using the BIG-IP SCOM management pack, I would like to set up SCOM to capture SNMP traps sent by the BIG-IP. Ideally, I would like to capture an SNMP trap that is triggered by the LB_FAILED event. I...
management
monitoring
dennypayne's avatar
dennypayne
Icon for Employee rankEmployee
Aug 11, 2009
Not sure about SCOM, but you can send off an SNMP trap using custom alerts as described in SOL3727:

https://support.f5.com/kb/en-us/solutions/public/3000/700/sol3727.html (Click here

To trigger the alert, just enable logging in the iRule which has the LB_FAILED event: 

 
 when LB_FAILED {  
    whatever your action is 
    log local0. "Client [IP::client_addr] has hit LB_FAILED" 
 }

So then your custom alert would look something like: 

 
 alert LB_FAILED_NOTICE "Client (.*) has hit LB_FAILED" { sn 
 mptrap OID=".1.3.6.1.4.1.3375.2.4.0.500" }

That OID is made up as described in the SOL.

Denny