Forum Discussion
Does particular irule need to be tweaked?
it should also work for the uppercase. can you try to add logging before the if sentence?
e.g.
log local0. "URI is [HTTP::uri]"
- WaynengiJan 06, 2018Nimbostratus
not sure what you mean?
- nitassJan 06, 2018Employee
e.g.
when HTTP_REQUEST { log local0. "URI is [HTTP::uri]" if { [string tolower [HTTP::uri]] contains "/wls-wsat/coordinatorporttype" } { log local0. "matched URI [HTTP::uri]" drop } }
- WaynengiJan 07, 2018Nimbostratus
I'll do some testing. I take that will show in the log file of what's happening. Right?
- nitassJan 07, 2018Employee
correct
if there are many clients, you may add client ip and probably port number to the log. so, it might be easier to find the problem request.
e.g.
when HTTP_REQUEST { log local0. "client is [IP::client_addr]:[TCP::client_port] URI is [HTTP::uri]" if { [string tolower [HTTP::uri]] contains "/wls-wsat/coordinatorporttype" } { log local0. "client is [IP::client_addr]:[TCP::client_port] matched URI [HTTP::uri]" drop } }
- WaynengiJan 07, 2018Nimbostratus
True. Thanks for your help. Ill leave it in and see what shows up.
- WaynengiJan 07, 2018Nimbostratus
I checked the ltm log files and I don't see any corresponding info regarding the URI rule. I checked in statistics and it shows that Total Executions are rising. Is there another place that it would log to?
- nitassJan 07, 2018Employee
local0 by default goes to ltm log.
you created a new connection when testing, didn't you? i mean the change (e.g. the irule) will not be applied to existing connection.
- WaynengiJan 07, 2018Nimbostratus
I found the logs. Didn't give it enough time. I do have a question. I see that we are logging the client ip but for some reason it doesn't up. Any thoughts?
- nitassJan 08, 2018Employee
I see that we are logging the client ip but for some reason it doesn't up. Any thoughts?
you mean you saw "client is" wording but no ip was logged, don't you? if yes, that is weird.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com