URL Logging, Hitcount, IP addresses

I'd suggest you are very careful using this to log the IP addresses as you may find your log files grows very quickly and the HSM may run out of disk space - use with care. This rule requires a Statistics Profile call busyurls and counters called 123, xyz and abc.

when HTTP_REQUEST {
 switch -glob [string tolower [HTTP::uri]] {
   "/test?123*" {
    log local0. "[IP::client_addr] connected to [HTTP::host][HTTP::uri]"
    STATS::incr busyurls 123
   }
   "/test?xyz*" {
    log local0. "[IP::client_addr] connected to [HTTP::host][HTTP::uri]"
    STATS::incr busyurls xyz
   }
   "/test?abc*" {
    log local0. "[IP::client_addr] connected to [HTTP::host][HTTP::uri]"
    STATS::incr busyurls abc
    }
 }
}

Thank you Steve for your response!

 

 

If I want to capture only hit counts, what could be the iRule.

 

 

BTW, even if it is only for hit counts still I need to create Statistics Profile.

 

You're welcome. Then it would be something like this, removing the log statements. Yes, you'd still need the Statistics Profile;

when HTTP_REQUEST {
 switch -glob [string tolower [HTTP::uri]] {
   "/test?123*" {
    STATS::incr busyurls 123
   }
   "/test?xyz*" {
    STATS::incr busyurls xyz
   }
   "/test?abc*" {
    STATS::incr busyurls abc
    }
 }
}

Good day,

 

is there any global setting is the F5 to send all the HTTP and HTTPS hit logs to syslog ?

 

Thank you