Forum Discussion
NimbostratusASM log warning message
Hi all,
Would like to ask what is the meaning of message below that found in /var/log/asm.log:
gtm01 warning perl[14234]: 01310014:4: ASM filtered HTML exceeded limit: event code C180 Filtered Response HTML exceeded max limit
Regards Sf
samstepCirrocumulus
This happens on very large content typically exceeding 50Mb. If your application has a webpage which has a size of 50Mb you have a special case (can you imagine how long it will take to be displayed on user's browser?)
You can increase the limit if you need to.
This is described in support article: https://support.f5.com/csp/article/K42301022
However I recommend you talk to your application development team first to see if such massive application responses are legitimate as this could potentially be a sign of an attack or some other problem.
The reason why F5 limits the response buffer to 50Mb by default is to protect the memory on your F5 device
Hope this helps,
Sam
- samstep
To find out which application is causing this - check the ASM log for this message:
`ASM bad response: event code I1627 Stopped response accumulation / extraction for support id: `You can then search for SupportID in ASM Event logs to figure out which ASM policy is triggering this issue.