Forum Discussion

dlg_23340's avatar
dlg_23340
Icon for Cirrus rankCirrus
Feb 28, 2013

user_alert.conf, <matched message> and negation

    I'm using user_alert.conf to send emails about VIPs exceeding their connection limit, so we have a section in /config/user_alert.conf that looks like this:     alert BIGIP_IP_RE...
management
monitoring
dlg_23340's avatar
dlg_23340
Icon for Cirrus rankCirrus
Feb 28, 2013
Packet rejected remote IP 10.10.10.10 port 4848 local IP 172.25.25.23 port 4848 proto UDP: Connection limit exceeded.

 

 

The remote IP changes, obviously, and we have several local IPs that are affected by this. So ideally i'd like to email on all messages except those that contain "port 4848 proto UDP".