F5 SL ASM iRule Parser for Hosted Deployments Networking riparino Vote Up +1 Vote Down -0You already voted! sourcetype=f5:silverline:asm irule=* vs_ip=* | rex "(?<log>.*)" | eval log_stripped = replace(log, "\\\\","") | rex field=log_stripped "data=\"(?<data_section>.*?)\", irule=" | spath input=data_section Share This: Tagged: #ASM#SilverlineASM#WebApplicationFirewallF5Firewall