| Solution |
To configure alert emails for server status changes, enable email alert notifications in the system settings and configure the SMTP server details, such as the server address, port, and authentication credentials.
Configure alert policies to monitor server status changes, and add recipient email addresses to receive notifications.
The system will then automatically send alerts when a server status changes.
To achieve this, configure an Automation by following the steps below:
- Navigate to Security Fabric -> Automation -> Stitch.
- In the 'Stitch' configuration, create a 'UPSERVER' stitch to monitor server status changes.
Under the Automation configuration, configure the Action and Trigger settings appropriately. To monitor server status changes, select the server-up event logs as the trigger.
Note:
The configuration for the Field Filter must be obtained from raw logs.
Download the event logs and verify that the correct raw logs are used.
Example logs:
v015xxxxdate=2025-02-25 time=10:49:05 log_id=19999495 msg_id=000000075273 device_id=FVVM01TM22000227 eventtime=1740476945477602735 vd="root" timezone="(GMT+1:00)Belgrade,Bratislava,Budapest,Ljubljana,Prague" timezone_dayst="GMTb-1" type=event subtype="system" pri=alert trigger_policy="N/A" user=daemon ui=daemon action=check-resource status=failure msg="Physical Server 1 [10.109.53.50:80] in server pool test status change from up to down"
v015xxxxdate=2025-02-25 time=10:49:12 log_id=19999496 msg_id=000000075275 device_id=FVVM01TM22000227 eventtime=1740476952580956281 vd="root" timezone="(GMT+1:00)Belgrade,Bratislava,Budapest,Ljubljana,Prague" timezone_dayst="GMTb-1" type=event subtype="system" pri=alert trigger_policy="N/A" user=daemon ui=daemon action=check-resource status=success msg="Physical Server 1 [10.109.53.50:80] in server pool test status change from down to up"
To receive emails about server status changes, configure the Email Policy.
In the event log, it was observed that when the server status changes, corresponding event logs are triggered, and email alerts are sent.
|
