FMC IP SLA Alert

[dcanady55]

FMC and FTD 7.4.1

I've setup an IP SLA to track some static routes and I'm struggling trying to figure out how to alert on if the SLA gets triggered. Is this possible? I want to setup an email alert anytime the SLA goes down and up.

Thanks,

[Rob Ingram · Accepted solution]

@dcanady55 you could use syslog and send an alert when the route is added or removed:-

622001

Error Message %FTD-6-622001: string tracked route network mask address , distance number , table string , on interface interface-name

Explanation A tracked route has been added to or removed from a routing table, which means that the state of the tracked object has changed from up or down.

https://www.cisco.com/c/en/us/td/docs/security/firepower/Syslogs/b_fptd_syslog_guide/syslogs6.html#con_4774896

Configure logging to send an email alert - https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200479-Configure-Logging-on-FTD-via-FMC.html

[dcanady55]

Thanks Rob,

I just set that up and testing this weekend and will report back the results on Monday. Do you happen to know if logging level of 1 alerts is all I need or should I put this at Informational? 

Thanks,

[Rob Ingram]

@dcanady55 informational would seem to be appropriate.

[MHM Cisco World]

https://www.tunnelsup.com/cisco-asa-and-sla-monitoring/

in ASA we run log list check link above, in FMC you can filter only these logs from level-6

https://forum.tufin.com/support/kc/latest/Content/Suite/12108.htm

MHM