I've been looking for a way to send out an email from a F5 BIG-IP (12.1.2) but I cannot find anything that tells me if a) this can be done and b) how to do that. I do have ASM's running around that I send emails from using the alert.conf on the CLI but that /var/log/ltm message of "Bandwidth exceeded by 75% ... " etc. etc, I want that to be send out as well.
Any tips are greatlly appreciated.
Witih kind regards,
DLP
P.s.: We do not log from these specific F5's to a SIEM of any kind otherwise I could have gotten my information that way 🙂
Ah thanks, I'll look into that then if there is no "built-in" way. I prefer not using crons because they don't survive upgrades. Do you happen to have an example?
About the cron not surviving the upgrades, what I like to do is "export the cron". I've a linux box with a cron, and this cron execute command remotely via SSH.
For example, install this following command (replace "SEND MAIL" by the method you use to send mail obviously 😅) on a cron of a computer with the SSH Key added authorized key and the user must have the advanced shell (let me know if you have question about this) :
ssh youruser@yourF5IP grep "Bandwidth exceeded by 75" /var/log/ltm > /dev/null
if [ $? == 0 ] ; then echo "SEND MAIL"; fi
That said, I don't like this solution, it would be far better for you to lose time installing a Nagios or anything that can monitor and keep link usage by SNMP.
