Telemetry Streaming: getting HTTP statistics via SNMP
Hi F5 community, I am looking to get HTTP statistics (total count, and broken by response code) metrics from Telemetry Streaming via SNMP (seems to be the most viable option). F5-BIGIP-LOCAL-MIB::ltmHttpProfileStat oid: .1.3.6.1.4.1.3375.2.2.6.7.6 However, the stats don't seem to come out correct at all: I do see deltas happening, but they don't match at all the traffic rate I expect to see. Furthermore, I have done some tests where I would start a load testing tool (vegeta) to fire concurrent HTTP requests, for which I do see the logs from the virtual server, but no matching increment in the above SNMP OID entries on none of the profiles configured. What am I doing wrong? does something need to be enabled on the HTTP profile in use to collect those stats? Best, Owayss
How to check CPU temperature on i2x00 series device?
How can I query CPU temperature? I've read through BIG-IP mib files and tried snmpwalk but it seems that CPU temperature info is not available on this device. I'm getting only following info when querying "sysCpu" branch: snmpwalk -On -c public -v 2c 127.0.0.1 sysCpu .1.3.6.1.4.1.3375.2.1.3.6.1.0 = INTEGER: 0 And that's it. Querying sysCpuSensorTemperature or sysCpuTemperature returns error that there's no object available at this OID. I can only get sysChassisTemp but it's not really what I'm looking for. I think cpu temperature information is available (at least should be I guess) since I'm getting TCTL-Delta temp high(crit) alerts in AOM. So I wanted to check out what's is exact value of temperature.
Triggering SNMP traps for SSL Certificates
I've read a few different SOL articles and posts here on DevCentral on how to generate SNMP traps locally from the F5. We use Solarwinds for SNMP alert notification (not sure if that's relevant or not) Last week, I ran the command tmsh run sys crypto check-cert ignore-large-cert-bundles enabled command on a guest with one expiring certificate and that triggered an email. I have the email. It's real. I haven't generate that trap with that identical command on the same guest, or other guests. Here is the email and the output of /config/user_alert.conf file. [username@f5-guest:/S1-green-P:Standby:In Sync] ~ cat /config/user_alert.conf alert CERTIFICATE_EXPIRED "Certificate (.*) expired" { snmptrap OID=".1.3.6.1.4.1.3375.2.4.0.300" alert CERTIFICATE_WILL_EXPIRE "Certificate (.*) will expire" { snmptrap OID=".1.3.6.1.4.1.3375.2.4.0.301" }
F5 SNMP Script to find Process Information.
Hi all, You may be able to help me out with the below (as I am having heaps of trouble finding OID’s). I’m trying to write a script that will look at some F5’s (running 9.4.X) and respond with the process “chmand” and its memory usage as below: The script will run the command "top -p pidof chmand -b -n 1" on each of the F5's and will return an output like the example below: c793681@argvlf300exh0751:Active] ~ top -p pidof chmand -b -n 1 top - 09:22:01 up 26 days, 5:18, 1 user, load average: 0.73, 0.80, 0.84 Tasks: 1 total, 0 running, 1 sleeping, 0 stopped, 0 zombie Cpu(s): 5.6%us, 2.5%sy, 0.0%ni, 91.9%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st Mem: 8177544k total, 8106268k used, 71276k free, 294976k buffers Swap: 1048504k total, 20k used, 1048484k free, 270880k cached PIDUSER PR NI VIRT RES SHRS%CPU%MEM TIME+ COMMAND 4512root 15 0 111m 59m4640S 0.0 0.7 01:51.0chmand I only really care about “RES” as we want to make a routine to address bug SOL12941 and proactively reboot machines. (https://support.f5.com/kb/en-us/solutions/public/12000/900/sol12941.html). Can someone assist/point me to the correct OID to use AND the syntax (I haven't done much scripting using SNMP and the syntax part is what has been getting me recently). Thanks guys! Regards, Steve.
SNMP ltmPoolMemberMonitorState - OID Truncation Rules
Hi, is anyone aware of the, seemingly "new" OID truncation scheme for long oids? We have just upgraded from 11.4 to 12.1 and our snmp queries are not predictable anymore. The once working query is (for example): F5-BIGIP-LOCAL-MIB::ltmPoolMemberMonitorState."/Common/Pool_re_dac_ted_ultralong_pool_name_xyzxyzxyzxyzxyzxyzxyzxyzxyzxyzxyzxyzxyzxyz"."/Common/MEMBER1".443 Now we need to query for: F5-BIGIP-LOCAL-MIB::ltmPoolMemberMonitorState."/Common/Pool_re_dac_ted_ultralong_pool_name_xyzxyzxyzxyzxyzxyzxyzxyzxyzxyzxyzx9d3d7c89"."/Common/MEMBER2".443 Is anyone aware, how the 9d3d7c89 is calculated, so I can update our scripts? Unfortunately we are not able to change the monitoring to iControl/ssh/... and the usage of snmp is obligatory for us by now. Thanks in advance and regards, \seb
snmp mac address and if index query
i normally query for all arp entries using the RFC1213-MIB mib and ipNetToMediaPhysAddress or ipNetToPhysicalPhysAddress oid; the typical output is something like: IP-MIB::ipNetToPhysicalPhysAddress.13.ipv4."172.18.x.y" = STRING: 0:d0:ff:ee:fc:a IP-MIB::ipNetToPhysicalPhysAddress.14.ipv4."127.2.0.1" = STRING: 0:23:e9:6e:97:0 IP-MIB::ipNetToPhysicalPhysAddress.17.ipv4."127.1.1.2" = STRING: 0:1:23:45:67:0 IP-MIB::ipNetToPhysicalPhysAddress.17.ipv4."127.1.1.3" = STRING: 0:1:23:45:67:1 IP-MIB::ipNetToPhysicalPhysAddress.17.ipv4."127.1.1.4" = STRING: 0:1:23:45:67:2 IP-MIB::ipNetToPhysicalPhysAddress.17.ipv4."127.1.1.5" = STRING: 0:1:23:45:67:3 IP-MIB::ipNetToPhysicalPhysAddress.19.ipv4."a.b.c.d" = STRING: 0:0:c:7:ac:97 (first an last ip's redacted) the number before the ipv4 bit usually corresponds to the ifIndex of the interface that the arp was seen on. however, on our ltm box: IF-MIB::ifIndex.80 = INTEGER: 80 IF-MIB::ifIndex.736 = INTEGER: 736 IF-MIB::ifIndex.752 = INTEGER: 752 IF-MIB::ifIndex.768 = INTEGER: 768 IF-MIB::ifIndex.784 = INTEGER: 784 IF-MIB::ifIndex.800 = INTEGER: 800 IF-MIB::ifIndex.816 = INTEGER: 816 IF-MIB::ifIndex.832 = INTEGER: 832 IF-MIB::ifIndex.848 = INTEGER: 848 IF-MIB::ifIndex.864 = INTEGER: 864 IF-MIB::ifIndex.880 = INTEGER: 880 IF-MIB::ifIndex.896 = INTEGER: 896 IF-MIB::ifIndex.912 = INTEGER: 912 IF-MIB::ifIndex.928 = INTEGER: 928 (as you can see the index's don't match). how can i match the ifIndex value from ipNetToPhysicalPhysAddress to a real physical description like that presented with sysInterfaceName ?
email alert notification not working when member came up again
Hello guys i've configured this: https://support.f5.com/csp/article/K3667 https://support.f5.com/csp/article/K59616664 I receive alerts when node goes down, but not when going up again What could be the problem? Oct 3 23:02:57 my.website.com notice mcpd[8459]: 01070640:5: Node /Common/172.17.70.18 address 172.17.70.18 monitor status down. [ /Common/icmp: down ] [ was up for 24hrs:2mins:5sec ] Oct 3 23:02:57 my.website.com notice mcpd[8459]: 01070640:5: Node /Common/172.17.70.19 address 172.17.70.19 monitor status down. [ /Common/icmp: down ] [ was up for 24hrs:2mins:6sec ] Oct 3 23:02:57 my.website.com notice mcpd[8459]: 01071682:5: SNMP_TRAP: Virtual /Common/dev-myweb has become unavailable Oct 3 23:02:59 my.website.com notice mcpd[8459]: 01070728:5: Node /Common/172.17.70.18 address 172.17.70.18 monitor status up. [ /Common/icmp: up ] [ was down for 0hr:0min:2sec ] Oct 3 23:03:02 my.website.com notice mcpd[8459]: 01070728:5: Node /Common/172.17.70.19 address 172.17.70.19 monitor status up. [ /Common/icmp: up ] [ was down for 0hr:0min:5sec ]
BIG-IP: How can I get the interface description with SNMP?
Hi, I've set an individual interface description on a F5 BIG-IP (firmware release BIG-IP 15.1.2.1 Build 0.0.10 Point Release 1) for a physical interface, but when I do a snmpwalk (SNMPv3), I get only the Interface name with a snmp walk. ich@(lb1)(cfg-sync In Sync)(Active)(/Common)(tmos)# list /net interface 1.8 net interface 1.8 { description Testdescription_ADVMON disabled snmpwalk [..] [..] IF-MIB::ifDescr.848 = STRING: 1.8 [..] I have, of course, grepped for the set interface description (Testdescription_ADVMON), but didn't get a hit. Is it possible to retrieve a customized interface description with SNMP and, if so, how?
