Forum Discussion

Stéphane_PICARD's avatar
Stéphane_PICARD
Icon for Nimbostratus rankNimbostratus
Oct 20, 2015

Remote looging : TCL error: /Common/irules_myirule <http_request> - Traffic rejected</http_request>

Dear fellows, after spending a couple of hours trying to understand the reason for an error i get i come here to ask for your help...

 

In a very basic I-rule i'd like to remotely log (to a log consolidation server) when a given URI is requested :

 

Here is what i try :

 

when HTTP_REQUEST { if { ([class match [string tolower [HTTP::uri]] starts_with My_Uri] ) } { log 10.21.0.87 "TEST" (...)

 

and each time i receive a "TCL ERROR" as such :

 

TCL error: /Common/irules_myirule - Traffic rejected (line 1) (line 1) invoked from within "log 10.21.0.87 "TEST""

 

Any idea of what can happen ? What is "(line 1) (line 1)" related to ? FYI i tried different values like :

 

log 10.21.0.87:514 "TEST" log 10.21.0.87:514 local0.info "TEST" log 10.21.0.87:514 .info "TEST"

 

but each time this same TCL error, Traffic rejected.

 

On the other hand 10.21.3.34 is defined in the "Remote Syslog Server List" and i receive all the logs (which means to me that it is not a network/firewall issue between the F5 and this remote server.

 

Any clue will be more than welcome. With Regards