Service check approaching-f5-all

Service check approaching-f5-all
0

Service check approaching-f5-all

Vendor: f5

OS: all

Description:
indeni will alert several weeks before a service check occurs on F5 devices.

Remediation Steps:
Contact F5 support.

How does this work?
This script logs into the device through SSH and extracts the service check date. The date is then compared to the latest entry in the official F5 list located at https://support.f5.com/csp/article/K7727.

Why is this important?
The service check date is located in the BIG-IP license and is the same as the date the license was last activated or the date the service contract for the device expires, whichever date is earlier. This alert would serve to let the administrators know that an upgrade to the latest version is not possible without a license reactivation.

Without Indeni how would you find this?
Manual tracking by an administrator is usually the only method for knowing if a license reactivation is needed.

f5-tmsh-show-sys-license-detail-show-sys-tmm-info-global

name: f5-tmsh-show-sys-license-detail-show-sys-tmm-info-global
description: Get the TPS limit, throughput limit and compression throughput limit
type: monitoring
monitoring_interval: 5 minutes
requires:
    vendor: f5
    product: load-balancer
    linux-based: 'true'
    shell: bash
comments:
    license-elements-limit:
        why: |
            License-limits can be used to regulate for instance SSL Transactions per second, APM maximum simultaneous users, maximum throughput of an F5 VE Edition or maximum compressed Mbits per second. It is important to track these whenever possible to ensure that no traffic disruption is caused by the license reaching the set threshold.
        how: |
            This script logs into the device through SSH and extracts the license limits.
        without-indeni: |
            Manual tracking by an administrator is usually the only method for knowing if a license limit is set and what it is.
        can-with-snmp: false
        can-with-syslog: false
    f5-service-check:
        why: |
            The service check date is located in the BIG-IP license and is the same as the date the license was last activated or the date the service contract for the device expires, whichever date is earlier. This alert would serve to let the administrators know that an upgrade to the latest version is not possible without a license reactivation.
        how: |
            This script logs into the device through SSH and extracts the service check date. The date is then compared to the latest entry in the official F5 list located at https://support.f5.com/csp/article/K7727.
        without-indeni: |
            Manual tracking by an administrator is usually the only method for knowing if a license reactivation is needed.
        can-with-snmp: false
        can-with-syslog: false
steps:
-   run:
        type: SSH
        command: tmsh -q -c "show sys license detail;show sys tmm-info global"
    parse:
        type: AWK
        file: tmsh-show-sys-license-show-sys-tmm-info-global.parser.1.awk

f5_service_check

// Deprecation warning : Scala template-based rules are deprecated. Please use YAML format rules instead.

package com.indeni.server.rules.library.templatebased.f5

import com.indeni.server.rules.RuleContext
import com.indeni.server.rules.library.templates.StateDownTemplateRule
/**
  *
  */
case class f5_service_check() extends StateDownTemplateRule(
  ruleName = "f5_service_check",
  ruleFriendlyName = "F5 Devices: Service check approaching",
  ruleDescription = "indeni will alert several weeks before a service check occurs on F5 devices.",
  metricName = "f5-service-check",
  alertDescription = "The service check for this device has passed. Upgrades post the service check date may fail. For more information see https://support.f5.com/csp/article/K7727\n\nThis alert was added per the request of <a target=\"_blank\" href=\"https://se.linkedin.com/in/patrik-jonsson-6527932\">Patrik Jonsson</a>.",
  baseRemediationText = "Contact F5 support.")()