Investigate a policy using iRule

Hello Moinul.

​

There are several ideas that you could use to log info about your policy evaluation status:

1. APM events (ACCESS_SESSION_STARTED, ACCESS_POLICY_COMPLETED, ACCESS_ACL_ALLOWED, ACCESS_ACL_DENIED), these events are executed in specific moments of the policy evaluation.
2. ACCESS_POLICY_AGENT_EVENT, in this case, this event is executed in the moment that you specify during the policy evaluation (configuring an iRule Event box).
3. Log Message, you can also log messages (and session variables) using a log message box.

​

There is a great article here that explains all your chances:

https://support.f5.com/csp/article/K80934060

​

Regards,

Dario.