F5-iRules to Log HTTP Error Responses-5XX

when HTTP_REQUEST {
    set hostvar [HTTP::host]
    set urivar [HTTP::uri]
    set ipvar [IP::client_addr] 
    }
    when HTTP_RESPONSE {
            if { [HTTP::status] starts_with "5" } {
                    log local0. "$ipvar requested $hostvar $urivar and received a [HTTP::status] from [IP::server_addr]" }

    }     
or

when HTTP_REQUEST {
set hostvar [HTTP::host]
set urivar [HTTP::uri]
set ipvar [IP::client_addr] }
when HTTP_RESPONSE {
if { [HTTP::status] eq 500 } {
log local0. “$ipvar requested $hostvar $urivar and received a 500 from [IP::server_addr]” }}


No comments:

Post a Comment