Forum Discussion

Chris_Phillips's avatar
Chris_Phillips
Icon for Nimbostratus rankNimbostratus
Mar 05, 2015

Attack type in ASM::violation_data always blank

Howdy. With an iRule logging ASM events over HSL, we use ASM::violation_data on 10.2.4. the 5th field, attack type, is apparently ALWAYS blank. If I just do a log local0. [ASM::violation_data] ...
application delivery
ASM Advanced WAF
LTM
security
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Mar 05, 2015

Chris,

 

According to the wiki ASM::violation that's not quite how this command works. It has multiple, delimited, fields. Hopefully the wiki will give you a steer on capturing the violation type.

 

Hope this helps,

 

N