Forum Discussion

Tom_K_185554's avatar
Tom_K_185554
Icon for Nimbostratus rankNimbostratus
Jun 01, 2018

How can I get hsl logging in splunk to be in json format

Hello, I am using the f5.analytics.v3.7.0 Iapps template. I have an irule which I will provide below which we use to send some connection event data to splunk using hsl logging. I have attache...
devops
iApps
iRules
security
Samir_Jha_52506's avatar
Samir_Jha_52506
Icon for Noctilucent rankNoctilucent
Jun 01, 2018

Well, Customization part can be done on splunk only. Because F5 send all HSL logs in raw format. I guess, you need to write some script/command on the fly to view in correct readable/tabular format.

Can you try luck to add newline [

\n
] in end. Example below(Just guessing)

    set client "[IP::client_addr]\n"