For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

yadgayan's avatar
yadgayan
Icon for Cirrus rankCirrus
Sep 21, 2023
Solved

iRule to log traffic details

Hi, I want to log below information to syslog via iRule Request headers including e.g. tap-*, X-* (e.g. X-Forwarded-For & X-Forwarded-Port ) src IP src Port request url referral url method re...
  • Hi yadgayan , 

    U can use this : 

    when HTTP_REQUEST {
        log local0. "HTTP Method = [HTTP::method]"
        log local0. "HTTP URI = [HTTP::uri]"
        log local0. "HTTP Path = [HTTP::path]"
        log local0. "HTTP Query = [HTTP::query]"
        log local0. "HTTP Version = [HTTP::version]"
        log local0. "HTTP Host Header = [HTTP::host]"
        log local0. "HTTP User Agent Header = [HTTP::header value "user-agent"]"
    }
    when HTTP_RESPONSE {
        log local0. "HTTP Status = [HTTP::status]"
        log local0. "HTTP version = [HTTP::version]"
        log local0. "HTTP Content Length Header = [HTTP::header value "content-length"]"
    }

    - you can remove any info you don't want to log it. 
    refer to this Link to find our more : https://my.f5.com/manage/s/article/K42210592

    I haven't tested this irule , but it should work. 

    By the way : you can use High speed logging ( HSL ), it's pretty good to use : 
    https://my.f5.com/manage/s/article/K00847516

    I hope this helps u 🙂 

  • yadgayan's avatar
    Sep 26, 2023

    Thanks Mohamed_Ahmed_Kansoh 

    I modified and made a single log entry to achieve my goal. But thanks a lot for the direction.