Forum Discussion

Basil_Parsley_1's avatar
Basil_Parsley_1
Icon for Nimbostratus rankNimbostratus
Apr 11, 2016

iRule - findstr - find and pull data from HTML payload to Splunk

Guys,   I have been tasked with sorting a HSL log sent from an LTM to Splunk ; basically is a website which customers log in putting in a username / password, subsequent orders require the input o...
application delivery
iRules
LTM
Josiah_39459's avatar
Josiah_39459
Historic F5 Account

So it sounds like you only want to send the log when "CustomerID" is actually found. So do your 

set resp_custID [findstr [HTTP::payload] "CustomerID"
first and then check 
if { $resp_custID ne "" } {
before logging.

Josiah_39459's avatar
Josiah_39459
Historic F5 Account
Apr 11, 2016
The examples here don't help? https://clouddocs.f5.com/api/irules/findstr.html ---------------------------------------------------------------------------------------- [findstr [HTTP::payload] "" 12 ""]