Trim Mobile Number

These are the other iRules I have implemented.

when ACCESS_POLICY_AGENT_EVENT {

set mobile [ACCESS::session data get "session.ad.last.attr.mobile"] log local0. "$mobile"

set mobile [string map {" " ""} $mobile]

set mobile [substr $mobile [expr [string length $mobile] -10 ] ]

ACCESS::session data set "session.logon.last.username" $mobile

unset mobile

}

Even this belov one doesn't work!

when ACCESS_POLICY_AGENT_EVENT { log local0. "Start" }

Could you send the Access Policy screenshot?

Yes, VPE would help to understand where the problem lies.

Seems to be that the iRule is not fired at all. If not already, turn on debug level on apm access policy logging (System ›› Logs : Configuration : Options), and check how the session flow goes from the apm log or session report. Do you see the flow going to the iRule event?

Do you have multiple iRule events in the VPE flowchart? Normally I add an if -clause to check the event ID, to make sure that the iRule is run only in the intended iRule event in the VPE flow. Something like below. Otherwise the iRule may be triggered in the first (possibly wrong one) encountered iRule event in the flow with some unexpected results. Also make sure the iRule is attached to the apm virtual server itself.

when ACCESS_POLICY_AGENT_EVENT { 
   if {[ACCESS::policy agent_id] eq "logging"} {
     log local0.info "Username: [ACCESS::session data get session.logon.last.username]"
   }
}

for the ACCESS_POLICY_AGENT_EVENT to work you do have to trigger it with an iRule VPE element.

but you should also be able to handle it with an assignment element, they can do pretty much what you want, including assigning variables, not just 0 or 1.

Hi Thanks for all answers I just found the way to achieve right pattern via "Variable Assignment". However I was wondering that the iRule part, why is not working ?

Can you share the working variable assign expression?

For the irule part, was the event ACCESS_POLICY_AGENT_EVENT?

Here is the Policy Map

Here is the working "Variable Assignment". Rule order is important!

• [S] session.logon.last.password = expr {[mcget{session.otp.assigned.val}]}
• session.logon.last.username = return [expr [string map {" " ""} [mcget {session.ad.last.attr.mobile}] ] ]
• session.logon.last.username = return [string range [mcget {session.logon.last.username}] end-9 end]

I have added iRule

This is more usefull