APM Events

Do you have APM provisioned?

I think I may have the same problem. APM is definitely provisioned and is in use. Trying to create an iRule with ACCESS_SESSION_START results in this error message:

 

 

01070151:3: Rule [test] error: line 1: [unknown event (ACCESS_SESSION_START)] [when ACCESS_SESSION_START { }]

 

 

I'm running BIG-IP 10.1.0 Build 3341.0 Final.

 

 

The other APM-specific events I have tested are recognized.

Ah, sorry I missed it earlier, the event is ACCESS_SESSION_STARTED

 

 

HTH...Jason

I imagine this would have been easier to determine if the commands were documented on the wiki :D

 

 

It looks like the APM config guide has the wrong name for this event:

 

 

 

https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm_config_10_1_0/apm_config_irules.html122471

 

 

ACCESS_SESSION_START

 

This event occurs when a new user session is created. This is triggered after creating the session context and initial session variables related to users source IP, browser capabilities and accepted languages.

 

 

Using ACCESS_SESSION_START

 

This event provides a notification that a new session is created. You can use this event to prevent a session from being created when a specific event occurs. For example, if the user is exceeding the concurrent sessions limit, or if the user does not qualify for a new session due to custom logic, you can prevent a session from starting.

 

You can use ACCESS::session commands to get and set various session variables. Admin can also use TCP, SSL, and HTTP iRule commands to determine various TCP, SSL, or HTTP properties of the user.

 

 

 

 

Aaron

It looks like SOL11209 documents this and a few other APM event name corrections:

SOL11209: Documentation Erratum: Incorrect iRule event names

https://support.f5.com/kb/en-us/solutions/public/11000/200/sol11209.html

   
   Command name in manualCorrect command name   
   ACCESS_ACL_ALLOWACCESS_ACL_ALLOWED   
   ACCESS_ACL_DENYACCESS_ACL_DENIED   
   ACCESS_SESSION_STARTACCESS_SESSION_STARTED   
   ACCESS_SESSION_CLOSEACCESS_SESSION_CLOSED   
   ACCESS_POLICY_COMPLETEACCESS_POLICY_COMPLETED   
   

Aaron

Commands documented in the wiki now, Aaron!

 

 

http://devcentral.f5.com/wiki/default.aspx/iRules.APM Click here

Great. Thanks for that.

 

 

Aaron

Example Code here: http://devcentral.f5.com/wiki/default.aspx/iRules/WEBSSO__select.html

 

 

Uses different quotes which will not allow saving of the iRule

 

 

“/owa” on line 3 has different quotes then "/owa/auth/logon.aspx?url=https://mysite.com/owa/&reason=0" on line 4

 

 

Changed line 3 to be "/owa" and it saves fine.

Hi Michael,

 

 

Any authenticated DC user can edit wiki pages. I updated the WEBSSO::select wiki page based on your comments.

 

 

Aaron