Forum Discussion
BIGIP DNS module iRules doesn't work
We are trying to add the below iRules (F5 Content pack for VMware logInsight) on our BIGIP VE(13.0)
=================================== iRule: logInsight_dns_response START ====================================when DNS_RESPONSE { set client_addr [IP::client_addr] set dns_server_addr [IP::local_addr] set question_name [DNS::question name] set is_wideip [DNS::is_wideip [DNS::question name]] set answer [join [DNS::answer] ;]
set hsl [HSL::open -proto UDP -pool logInsight_pool_syslog]
HSL::send $hsl "<190>f5_irule=web_access_DNS_RESPONSE,src_ip=$client_addr,dns_server_ip=$dns_server_addr,question_name=$question_name,is_wideip=$is_wideip,answer=\"$answer\"\r\n"
}
=============================== iRule: logInsight_dns_response END ================================But the BIGIP give us the error below:
01070151:3: Rule [/Common/logInsight_dns_response] error: /Common/logInsight_dns_response:4: error: [unknown event (DNS_RESPONSE)][when DNS_RESPONSE { set client_addr [IP::client_addr] set dns_server_addr [IP::local_addr] set question_name [DNS::question name] set is_wideip [DNS::is_wideip [DNS::question name]] set answer [join [DNS::answer] ;]
set hsl [HSL::open -proto UDP -pool logInsight_pool_syslog] HSL::send $hsl "<190>f5_irule=web_access_DNS_RESPONSE,src_ip=$client_addr,dns_server_ip=$dns_server_addr,question_name=$question_name,is_wideip=$is_wideip,answer=\"$answer\"\r\n" }]
We don't know what is going wrong.
Anybody can help?
1 Reply
- flypast
Altostratus
I created the required iRule under local Traffic and applied to DNS listener but it looks like the traffic has not been sent to LogInsight.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com