Web Analytics iRule Style

 
 when RULE_INIT { 
    replace the value of the _uacct variable with your Google Analytics account. 
     set analytics " 
    
  
  
 " 
   set exist_search "urchinTracker()" 
 } 
 when HTTP_REQUEST { 
  Get time for start of HTTP request 
    set http_request_time [clock clicks -milliseconds] 
  
     Log the start of a new HTTP request 
    set LogString "Client [IP::client_addr]:[TCP::client_port] -> [HTTP::host][HTTP::uri]" 
    log local0.info "$LogString (request)" 
  
  
    Don't allow data to be chunked 
   if { [HTTP::version] eq "1.1" } { 
 log local0.info "HTTP::version = 1.1"   
     if { [HTTP::header is_keepalive] } { 
 log local0.info "is_keepalive = true" 
        HTTP::header replace "Connection" "Keep-Alive" 
 log local0.info "Connection is now Keep-Alive" 
     } 
     HTTP::version "1.0" 
  
 log local0.info "HTTP::version is now 1.0" 
   } 
 } 
 when HTTP_RESPONSE { 
    Received the response headers from the server.  Log the pool name, IP and port, status and time delta 
    log local0.info "$LogString (response) - pool info: [LB::server] - status: [HTTP::status] (request/response delta: [expr [clock clicks -milliseconds] - $http_request_time]ms)" 
  
   if { [HTTP::header Content-Type] starts_with "text/html" } { 
     if { [HTTP::header exists "Content-Length"] } { 
       log local0.info "content length: [HTTP::header {Content-Length}]" 
       set content_length [HTTP::header "Content-Length"] 
     } else { 
       set content_length 1000000000 
     } 
     log local0.info "Collecting $content_length bytes" 
     if { $content_length > 0 } { 
        HTTP::collect $content_length 
     } 
   } 
 } 
 when HTTP_RESPONSE_DATA { 
   log local0.info "Content Type: [HTTP::header Content-Type]" 
   if { ! ([HTTP::payload] contains $::exist_search) } { 
    log local0.info "Payload didn't contain $::exist_search!" 
     set idx [string last "" [HTTP::payload]] 
     if { -1 == $idx } { 
       set idx [string last "" [HTTP::payload]] 
     } 
     log local0.info "html end tag found at $idx" 
     if { -1 == $idx } { 
 log local0.info "-1 == $idx" 
       set offset [HTTP::payload length] 
     } else { 
 log local0.info "-1 != $idx" 
       set offset $idx 
     } 
  
 log local0.info "before HTTP::payload replace" 
     HTTP::payload replace $offset 0 $::analytics 
 log local0.info "after HTTP::payload replace" 
   } 
 } 
 when CLIENT_CLOSED { 
     Log the end time of the TCP connection 
    log local0.info "Closed TCP connection from [IP::client_addr]:[TCP::client_port] to [IP::local_addr]:[TCP::local_port] (open for: [expr [clock clicks -milliseconds] - $tcp_start_time]ms)" 
 } 
 when CLIENT_ACCEPTED { 
     Get time for start of TCP connection in milleseconds 
    set tcp_start_time [clock clicks -milliseconds] 
  
     Log the start of a new TCP connection 
    log local0.info "New TCP connection from [IP::client_addr]:[TCP::client_port] to [IP::local_addr]:[TCP::local_port]" 
 } 
 

 
  
 Nov  3 18:55:06 tmm tmm[2931]: Rule urchin_logger : New TCP connection from XXX.XXX.XXX.XXX:20747 to XXX.XXX.XXX.XXX:443 
 Nov  3 18:55:06 tmm tmm[2931]: Rule urchin_logger : Client XXX.XXX.XXX.XXX:20747 -> www.hostname.com/my/uri.do?action=action1 (request) 
 Nov  3 18:55:06 tmm tmm[2931]: Rule urchin_logger : HTTP::version = 1.1 
 Nov  3 18:55:06 tmm tmm[2931]: Rule urchin_logger : is_keepalive = true 
 Nov  3 18:55:06 tmm tmm[2931]: Rule urchin_logger : Connection is now Keep-Alive 
 Nov  3 18:55:06 tmm tmm[2931]: Rule urchin_logger : HTTP::version is now 1.0 
 Nov  3 18:55:06 tmm tmm[2931]: Rule urchin_logger : Client XXX.XXX.XXX.XXX:20747 -> www.hostname.com/my/uri.do?action=action1 (response) - pool info: was XXX.XXX.XXX.XXX 9443 - status: 200 (request/response delta: 247ms) 
 Nov  3 18:55:06 tmm tmm[2931]: Rule urchin_logger : Collecting 1000000000 bytes 
 Nov  3 18:55:06 tmm tmm[2931]: Rule urchin_logger : Content Type: text/html;charset=UTF-8 
 Nov  3 18:55:06 tmm tmm[2931]: Rule urchin_logger : Payload didn't contain urchinTracker()! 
 Nov  3 18:55:06 tmm tmm[2931]: Rule urchin_logger : html end tag found at 60866 
 Nov  3 18:55:06 tmm tmm[2931]: Rule urchin_logger : -1 != 60866 
 Nov  3 18:55:06 tmm tmm[2931]: Rule urchin_logger : before HTTP::payload replace 
 Nov  3 18:55:06 tmm tmm[2931]: Rule urchin_logger : after HTTP::payload replace 
 Nov  3 19:00:06 tmm tmm[2931]: Rule urchin_logger : Closed TCP connection from XXX.XXX.XXX.XXXX:20747 to XXX.XXX.XXX.XXX:443 (open for: 300568ms)