Forum Discussion

flypast's avatar
flypast
Icon for Altostratus rankAltostratus
Jan 31, 2018

BIGIP DNS module iRules doesn't work

We are trying to add the below iRules (F5 Content pack for VMware logInsight) on our BIGIP VE(13.0)

=================================== iRule: logInsight_dns_response START ====================================

when DNS_RESPONSE { set client_addr [IP::client_addr] set dns_server_addr [IP::local_addr] set question_name [DNS::question name] set is_wideip [DNS::is_wideip [DNS::question name]] set answer [join [DNS::answer] ;]

set hsl [HSL::open -proto UDP -pool logInsight_pool_syslog]
HSL::send $hsl "<190>f5_irule=web_access_DNS_RESPONSE,src_ip=$client_addr,dns_server_ip=$dns_server_addr,question_name=$question_name,is_wideip=$is_wideip,answer=\"$answer\"\r\n"

}

=============================== iRule: logInsight_dns_response END ================================

But the BIGIP give us the error below:

01070151:3: Rule [/Common/logInsight_dns_response] error: /Common/logInsight_dns_response:4: error: [unknown event (DNS_RESPONSE)][when DNS_RESPONSE { set client_addr [IP::client_addr] set dns_server_addr [IP::local_addr] set question_name [DNS::question name] set is_wideip [DNS::is_wideip [DNS::question name]] set answer [join [DNS::answer] ;]

set hsl [HSL::open -proto UDP -pool logInsight_pool_syslog] HSL::send $hsl "<190>f5_irule=web_access_DNS_RESPONSE,src_ip=$client_addr,dns_server_ip=$dns_server_addr,question_name=$question_name,is_wideip=$is_wideip,answer=\"$answer\"\r\n" }]

We don't know what is going wrong.

Anybody can help?

1 Reply

  • I created the required iRule under local Traffic and applied to DNS listener but it looks like the traffic has not been sent to LogInsight.