grep'ng for 'string' in bigip.conf

You have to love this type of posts where it evolves.

 

 

Bhattman

I have been inspired. Building off the pretty much every other poster in this thread, here's my not-exactly-a-one-liner solution:

  
  list() {  
    object=$1  
    pattern=$2  
    if [ -z "$2" ]; then  
      awk '/'^"$object"'/,/^}$/ {print}' /config/bigip{.conf,_base.conf}  
    else  
      for i in $(b $object list | awk 'BEGIN {RS="\n}"} /'"$pattern"'/ {print $2}'); do  
        awk '/'^"$object $i"'/,/^}$/ {print}' /config/bigip{.conf,_base.conf} 
      done  
    fi  
  }  
  

Put that at the bottom of the '/root/.bash_profile' file, then either logout and back in, or source the file with:

  
  source /root/.bash_profile  
  

After that you can either search for all objects of a certain type with:

list

Or you can search for the set of objects that contain a specific pattern with:

  
  list    
  

Your original example would work with:

  
  list virtual http-xff  
  

This isn't nearly as fast as Humphrey's perl script, and certainly not as fast as a good awk one-liner, but it's flexible, and it will work with patterns that are contained within an embedded block ({...}) in the object. One example would be trying to find all SSL vips that use a specific clientside profile, or all iRules that use a certain pool within an if/else, etc... I've tested it a bit, but I may have missed some condition that causes it to fail. If you catch something that I didn't, please let me know.

If your worried about losing your .bash_profile during an upgrade, you can copy this to a file and put that file in /shared/bin (the 'bin' sub-dir does not exist by default). Then add this to the bottom of your .bash_profile:

  
  source /path/to/file  
  

Actually, I keep all funtions like this in a file located in /shared/bin, then source that file from .bash_profile so everything is available on login. If I boot to the other partition all I need to do to get everything back is re-add the 'source' command to .bash_profile.

PS> I tried -a lot- to isolate the object name from within a single awk statement rather than resorting to calling bigpipe... it will take someone better than I to make it happen.

--jesse

Hi Jesse,

 

Great work!!!

 

Bhattman

 

I think these examples might break with an iRule which has a closing brace on an empty line within the iRule code. Many iRules in the bigip.conf have un-indented lines for the event definitions:

 

 

 
 rule rule1 {  
 when RULE_INIT { 
    blah blah 
 } <--------- 
 when HTTP_REQUEST {  
    if (blahblah1) {  
       blah blah ...  
       if (blahblah2) {  
          blah blah ...  
       } 
    } else {  
       blah blah ...  
    }  
 } <--------- 
 } 
 

 

 

It would be ideal if you could actually check for the closing curly brace that corresponds to the object definition--not just the first closing brace alone on a line (\n}\n). But I'm not sure how to do this in awk or perl.

 

 

Aaron

Thanks Aaron ... This code will check the closing curly brace that corresponds to an object.

 

 

  
  !/usr/bin/perl  
  my ($File, $Pattern) = @ARGV;  
  my ($CurlyBraces, $Object) = (0, "");  
    
  open (fh, $File) || die "Cant open $File";  
  while (  ){  
          $Object .= $_;  
          $CurlyBraces += (tr/\{//);  
          $CurlyBraces -= (tr/\}//);  
    
          if ($CurlyBraces == 0) {  
                  print $Object if ($Object =~ /$Pattern/s);  
                  $Object = "";  
          }  
  }  
  close (fh);  
  

This should be a cakewalk with the new scripting ability in tmsh. I'll send a $25 amazon gift card to the first non-F5 user who figures it out and posts here. Take a look in the tmsh wiki (Click here) for an assist.

No takers, eh? I'll post a solution Monday, so you have until then.

I'm interested to try but I don't have v10.1 ready right now

What about this, my first tmsh script

     
   proc script::run {} {     
    if { $tmsh::argc != 3 } {     
     puts "Args:  , e.g., virtual http_xff"     
    } else {     
     foreach {obj} [tmsh::get_config /ltm [lindex $tmsh::argv 1] ] {     
      foreach {field_name} [tmsh::get_field_names value $obj] {     
       if { [tmsh::get_field_value $obj $field_name] contains [lindex $tmsh::argv 2]} {     
        puts  "[tmsh::list [tmsh::get_type $obj] [tmsh::get_name $obj]]"     
        break     
       }     
      }     
     }     
    }     
   }     
  

sample:

 
 root@bigip(Active)(tmos) run cli script abc2 virtual http_xff 
 ltm virtual http_xff { 
     destination x.x.x.x:https 
     ip-protocol tcp 
     mask x.x.x.x 
     pool http_xff 
     profiles { 
         tcp { } 
     } 
     snat automap 
 } 
 

Posted the solution yesterday to the wiki...forgot to pass along.

 

 

http://devcentral.f5.com/Wiki/default.aspx/tmsh/ConfigSearch.html Click here