For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MSZ's avatar
MSZ
Icon for Nimbostratus rankNimbostratus
Aug 01, 2018

How to exempt any URL from event logs?

I would like to ask that is it possible to exempt a URL from event logs? For Example: https://www.mytest.com/test/list I have to exempt the URL "/test/list" from event logs (either alarm or blocked)....
ASM Advanced WAF
BIG-IP
security
lostpacket_5555's avatar
lostpacket_5555
Historic F5 Account
Aug 03, 2018

You can craft a custom iRule referencing a Data Group to disable ASM and/or DOSL7 processing based on URL string matching.

iRule Definition:

when HTTP_REQUEST {
if { [class match  [string tolower [HTTP::uri]] contains ]  } {
ASM::disable
DOSL7::disable
}
   return
}

See https://support.f5.com/csp/article/K47781184