Forum Discussion
how to add HTTP HOST to telemetry (Generic HTTP)?
- Feb 13, 2024
It has been resolved via the github issue.
Solution:
For anyone who would need this:
you have to add: http_host=${Host} to the request logging profile.
Request log template becomes (similar for response logging): event_source="request_logging",hostname="$BIGIP_HOSTNAME",client_ip="$CLIENT_IP",server_ip="$SERVER_IP",http_method="$HTTP_METHOD",http_uri="$HTTP_URI",virtual_name="$VIRTUAL_NAME",event_timestamp="$DATE_HTTP",http_host="${host}"For us specifically, it was for the F5-Elastic integration, info docs below:
https://docs.elastic.co/integrations/f5_bigip
https://github.com/elastic/integrations/blob/main/packages/f5_bigip/data_stream/log/elasticsearch/ingest_pipeline/pipeline_bigipltm.yml
LiefZimmermancan you check if someone can look into this? It has been 7 months..
I also opened a Gihub issue: https://github.com/F5Networks/f5-telemetry-streaming/issues/274
- CypherFeb 13, 2024Cirrus
It has been resolved via the github issue.
Solution:
For anyone who would need this:
you have to add: http_host=${Host} to the request logging profile.
Request log template becomes (similar for response logging): event_source="request_logging",hostname="$BIGIP_HOSTNAME",client_ip="$CLIENT_IP",server_ip="$SERVER_IP",http_method="$HTTP_METHOD",http_uri="$HTTP_URI",virtual_name="$VIRTUAL_NAME",event_timestamp="$DATE_HTTP",http_host="${host}"For us specifically, it was for the F5-Elastic integration, info docs below:
https://docs.elastic.co/integrations/f5_bigip
https://github.com/elastic/integrations/blob/main/packages/f5_bigip/data_stream/log/elasticsearch/ingest_pipeline/pipeline_bigipltm.yml- LiefZimmermanFeb 13, 2024Admin
Fantastic! I was really wondering where else I might take this escalation. Thanks for bringing this back to the thread Cypher - really valuable.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com