Forum Discussion
Zeeshan_Ahmad_1
Dec 07, 2014Nimbostratus
You can use the below irule to print the entire detail in a single log entry and will receive a single email.
when ASM_REQUEST_VIOLATION {
set x [ASM::violation_data] log local3. "Request violations:=[lindex $x 0] Support id:=[lindex $x 1] web_application=[lindex $x 2] severity=[lindex $x 3] source ip:=[lindex $x 4] attack_type=[lindex $x 5] request_status=[lindex $x 6]"
}