Technical Forum
Ask questions. Discover Answers.
cancel
Showing results for 
Search instead for 
Did you mean: 

irule logging question

Brandon
Cirrostratus
Cirrostratus

I would like the ability to log the IPs that are dropped. 

 

 

when FLOW_INIT {
set ipaddr [IP::client_addr]
set fromCountry [whereis $ipaddr country]
if { (not[class match $fromCountry equals AnyConnect_VPN_PermitCountryCode_DataGroup] )} {

set vsname [virtual]

 

# log local0.notice 

drop

}

}

1 ACCEPTED SOLUTION

mihaic
MVP
MVP

Have you tried something like this:

log local0.notice "Denied IP on VIP $vsname : $ipaddr"

 

View solution in original post

3 REPLIES 3

mihaic
MVP
MVP

Have you tried something like this:

log local0.notice "Denied IP on VIP $vsname : $ipaddr"

 

thank you works great

JamesCorreia
Nimbostratus
Nimbostratus

Thanks, I will try it.

.