Forum Discussion
AnhKhoa_53927
Nimbostratus
NimbostratusASM send mail alert when request violation with iRule
Hi all
I have F5-ASM (11.3.0), when ASM have violation or blocking request, I want F5 notice me via email.
I have configed F5-ASM send email when have request blocking. But I want in body o...
Zeeshan_Ahmad_1Nimbostratus
NimbostratusYou can use the below irule to print the entire detail in a single log entry and will receive a single email.
when ASM_REQUEST_VIOLATION {
set x [ASM::violation_data] log local3. "Request violations:=[lindex $x 0] Support id:=[lindex $x 1] web_application=[lindex $x 2] severity=[lindex $x 3] source ip:=[lindex $x 4] attack_type=[lindex $x 5] request_status=[lindex $x 6]"
}