Remote looging : TCL error: /Common/irules_myirule <http_request> - Traffic rejected</http_request>
Dear fellows, after spending a couple of hours trying to understand the reason for an error i get i come here to ask for your help...
In a very basic I-rule i'd like to remotely log (to a log consolidation server) when a given URI is requested :
Here is what i try :
when HTTP_REQUEST { if { ([class match [string tolower [HTTP::uri]] starts_with My_Uri] ) } { log 10.21.0.87 "TEST" (...)
and each time i receive a "TCL ERROR" as such :
TCL error: /Common/irules_myirule - Traffic rejected (line 1) (line 1) invoked from within "log 10.21.0.87 "TEST""
Any idea of what can happen ? What is "(line 1) (line 1)" related to ? FYI i tried different values like :
log 10.21.0.87:514 "TEST" log 10.21.0.87:514 local0.info "TEST" log 10.21.0.87:514 .info "TEST"
but each time this same TCL error, Traffic rejected.
On the other hand 10.21.3.34 is defined in the "Remote Syslog Server List" and i receive all the logs (which means to me that it is not a network/firewall issue between the F5 and this remote server.
Any clue will be more than welcome. With Regards