Forum Discussion

S_L_V_Ramana_T's avatar
S_L_V_Ramana_T
Icon for Nimbostratus rankNimbostratus
Feb 08, 2020

How to enable proper remote logging for irule

Hello All,

 

We have created irule to unblock the Geo-location for few IP address. But we are facing the challenge with remote logging.

 

We have used ASM_REQUEST_DONE in irule. It means ASM already processed the request and generated the log in the back end the same log is forwarded to remote logging server as well.. But it's false positive.. We want to send unblocking log to remote syslog server as well.. Please help us on this.

 

Thank you.

 

ASM Advanced WAF
ASM unblocking
iRules
security
  • Simon_Blakely's avatar
    Simon_Blakely
    Icon for Employee rankEmployee
    Feb 11, 2020

    When logging from ASM using a user-defined format string, there is a field "blocking_exception_reason" that will display "Unblocked from iRule" when ASM::unblock is used.

  • S_L_V_Ramana_T's avatar
    S_L_V_Ramana_T
    Icon for Nimbostratus rankNimbostratus
    Feb 22, 2020

    Hi Blakely,

     

    Thank you for the response.

     

    The issue has been resolved with help of BIG IP logs.

     

    Thanks & Regards

    Ramana T