I was able to get the session value for the request, but now I also need to get the data for the response post.
I tried duplicating the rule, with http_Request instead of http_response and I am getting this error.
TCL error: Rule claimcenter_persist HTTP_RESPONSE - expected integer but got Illegal argument. Invalid integer value line 1 invoked from within HTTP::collect [HTTP::header Content-Length]
Here is what I have now for the rule.
when HTTP_REQUEST {
collect the payload containing the POST data
HTTP::collect [HTTP::header Content-Length]
}
when HTTP_REQUEST_DATA {
look for persistence data beginning the 59th character following the 'xmlns:soapenc=' string & ending @ "<" char
and follow existing persistence record or create a new one
persist uie [findstr [HTTP::payload] xmlns:soapenc= 58 <]
log local0. [findstr [HTTP::payload] xmlns:soapenc= 58 <]
}
when HTTP_RESPONSE {
collect the payload containing the POST data
HTTP::collect [HTTP::header Content-Length]
}
when HTTP_RESPONSE_DATA {
look for persistence data beginning the 59th character following the 'xmlns:soapenc=' string & ending @ "<" char
and follow existing persistence record or create a new one
persist uie [findstr [HTTP::payload] xmlns:soapenc= 58 <]
log local0. [findstr [HTTP::payload] xmlns:soapenc= 58 <]
}