Forum Discussion

Basil_Parsley_1's avatar
Basil_Parsley_1
Icon for Nimbostratus rankNimbostratus
Apr 11, 2016

iRule - findstr - find and pull data from HTML payload to Splunk

Guys,   I have been tasked with sorting a HSL log sent from an LTM to Splunk ; basically is a website which customers log in putting in a username / password, subsequent orders require the input o...
application delivery
iRules
LTM
Josiah_39459's avatar
Josiah_39459
Historic F5 Account

So it sounds like you only want to send the log when "CustomerID" is actually found. So do your 

set resp_custID [findstr [HTTP::payload] "CustomerID"
first and then check 
if { $resp_custID ne "" } {
before logging.

Basil_Parsley_1's avatar
Basil_Parsley_1
Icon for Nimbostratus rankNimbostratus
Apr 11, 2016
So it sounds like you only want to send the log when "CustomerID --- True ;-) I will look to use the if statement .... My main knowledge gap here is that I do not know how to perform the logic that says - Take the next 8 digits following string and put these in a log. Could I use skip_count ; if so what would be the syntax?