How to exempt any URL from event logs?

Question

I would like to ask that is it possible to exempt a URL from event logs?
For Example:
https://www.mytest.com/test/list
I have to exempt the URL "/test/list" from event logs (either alarm or blocked). 
I don't want to show any log from this URL. 
Already disabled all signatures from this URL. 
Allowed some HTTP method by over ridden. 
But still it is showing in event logs as "illegal http response: 405" (which is for HTTP method). &nbsp;
Current version: 13.0.0 HF2&nbsp;

lostpacket_5555 · Answer

You can craft a custom iRule referencing a Data Group to disable ASM and/or DOSL7 processing based on URL string matching.
iRule Definition:
when HTTP_REQUEST {
if { [class match  [string tolower [HTTP::uri]] contains ]  } {
ASM::disable
DOSL7::disable
}
   return
}

See https://support.f5.com/csp/article/K47781184

Forum Discussion

How to exempt any URL from event logs?

1 Reply

Recent Discussions

F5Access | MacOS Sonoma

Transaction looks successful but file not downloading

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

F5 Access Guard Deprecated: ZTA APM

F5 loadbalancer not working

Related Content

Log separation by event

AWAF - Do not log Geolocation violations from the Event Log

Security event logs forwarding

export ASM event logs in csv format

iRule Event Order Flowchart