Forum Discussion
iRule to log HTTP request as Apache combined standard format
Hello,
I used this iRule to log HTTP as Apache combined format. Why i have twice every log? F5 LTM is configuered to log to a remote syslog server.
iRule Irule_log_combined:
when HTTP_REQUEST { set host [HTTP::host] set username [HTTP::username] set client_IP [IP::client_addr] set request "\"[HTTP::method] [HTTP::uri] HTTP/[HTTP::version]\"" set request_time [clock clicks -milliseconds] set referer [HTTP::header "Referer"] set ua [HTTP::header "User-Agent"] textset xff [HTTP::header "X-Forwarded-For"] } when HTTP_RESPONSE { set response_time [expr [clock clicks -milliseconds] - $request_time] set now [clock format [clock seconds] -format "%d/%b/%Y:%H:%M:%S %z"] set contentlength [HTTP::header "Content-Length"] set status [HTTP::status]
log local0. "$host $client_IP $username $now $request $status $contentlength \"$referer\" \"$ua\" \"$xff\" $response_time"
}
log output: 2014-03-11T10:33:41.000+01:00 172.19.208.17 canal_ip5_4200LB tmm[9451]: Rule /SRO01_OTT/Irule_log_combined : webtv-live-hss-m1.direct-ip5.canal-plus.com 194.4.235.1%201 11/Mar/2014:10:33:41 +0100 "GET /live/hss/canalplus-hd.isml/QualityLevels(96000)/Fragments(vo=244855920800474) HTTP/1.1" 200 25331 "myreferer" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:27.0) Gecko/20100101 Firefox/27.0" "myforwardedip" 2 2014-03-11T10:33:41.000+01:00 172.19.208.17 canal_ip5_4200LB info tmm[9451]: Rule /SRO01_OTT/Irule_log_combined : webtv-live-hss-m1.direct-ip5.canal-plus.com 194.4.235.1%201 11/Mar/2014:10:33:41 +0100 "GET /live/hss/canalplus-hd.isml/QualityLevels(96000)/Fragments(vo=244855920800474) HTTP/1.1" 200 25331 "myreferer" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:27.0) Gecko/20100101 Firefox/27.0" "myforwardedip" 2
2014-03-11T10:33:41.000+01:00 172.19.208.17 canal_ip5_4200LB tmm6[9457]: Rule /SRO01_OTT/Irule_log_combined : webtv-live-hss-m1.direct-ip5.canal-plus.com 194.4.235.1%201 11/Mar/2014:10:33:41 +0100 "GET /live/hss/canalplus-hd.isml/QualityLevels(3889)/FragmentInfo(captfra=244855920996586) HTTP/1.1" 200 198 "myreferer" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:27.0) Gecko/20100101 Firefox/27.0" "myforwardedip" 0 2014-03-11T10:33:41.000+01:00 172.19.208.17 canal_ip5_4200LB info tmm6[9457]: Rule /SRO01_OTT/Irule_log_combined : webtv-live-hss-m1.direct-ip5.canal-plus.com 194.4.235.1%201 11/Mar/2014:10:33:41 +0100 "GET /live/hss/canalplus-hd.isml/QualityLevels(3889)/FragmentInfo(captfra=244855920996586) HTTP/1.1" 200 198 "myreferer" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:27.0) Gecko/20100101 Firefox/27.0" "myforwardedip" 0
Advice please?
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
