Forum Discussion
2funky_105078
Feb 27, 2018Cirrus
Thanks for your time looking at my question. I tried but it did not work.
Anyway i found this and it's OK.
when ASM_REQUEST_DONE
{
log local0.debug "\[ASM::status\] = [ASM::status]"
if { ([ASM::status] equals "alarmed") && ([ASM::violation_data] contains "VIOLATION_VIRUS_DETECTED") } {
set x [ASM::violation_data]
HTTP::header insert X-ASM "violation=[lindex $x 0] supportid=[lindex $x 1]"
log local0.debug "DEBUG02: violation=[lindex $x 0] supportid=[lindex $x 1]"
}
}