Forum Discussion

Chris_Vanderlaa's avatar
Chris_Vanderlaa
Icon for Nimbostratus rankNimbostratus
Dec 15, 2015

iRules - pull the 'url' from the http header and send to syslog server?

Hello,   I am trying to create an iRule that sends the following to syslog:   Read the HTTP header, take the 'URL' and send a message to syslog showing what URL was in the header CLIENT_ACCEP...
application delivery
http header
iRules
syslog
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Dec 15, 2015

Hi Chris,

its not possible to access the URL during CLIENT_ACCEPTED event, since the client hasn't send this information at this stage.

Take a look to the customized rules below. I've added a unique connection ID for better filtering of syslog messages and logging of HOST and PATH values.

when CLIENT_ACCEPTED { 
    set request_stamp [clock clicks]
    set client_ip [IP::client_addr]
    set virtual_ip [IP::local_addr]
    log 1.2.3.4 "ConID: $request_stamp : Client \"$client_ip\" has connected to VIP \"$virtual_ip\""
}

when HTTP_REQUEST {
    set url "[HTTP::host][HTTP::path]"
    log 1.2.3.4 "ConID: $request_stamp : New HTTP Request received for \"$url\""
}

when SERVER_CONNECTED {
    set server_ip [IP::server_addr]
    log 1.2.3.4 "ConID: $request_stamp : LTM has connected Client \"$client_ip\" to Server \"$server_ip\""
}

Cheers, Kai