For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Arnaud_Lemaire's avatar
Arnaud_Lemaire
Icon for Employee rankEmployee
Aug 01, 2014

I think you wan catch the authorizatio header in HTTP_REQUEST_RELEASE event :

when HTTP_REQUEST_RELEASE {
    log local0. "auth: [HTTP::header Authorization]"
}