Forum Discussion

PeterHession's avatar
PeterHession
Icon for Nimbostratus rankNimbostratus
Oct 29, 2019

How to truncate Viewstate values in ASM Logs

We have a few ASP.NET applications with large numbers of Viewstate that come before other values in the request, causing our logs for those requests to pretty much only contain the viewstates and not the actual user submitted data. I'm looking for a way to truncate these viewstate values in both the local and off boxed logs for the ASM so that we can actually see the full context of the request instead of just being able to see viewstates.

 

I've attempted to use the Mask Value in Logs option for the parameter but that just replaces every character with a *, which still leads to the same situation. I don't want to increase the logging size as these are off boxed to Splunk and that much of an increase in volume will cost quite a bit.

 

Is there any way to actually truncate parameter values in the logs so that more meaningful data can be viewed in the logs making troubleshooting of ASM blocks much more manageable?

1 Reply

  • The answer is no - there isn't any functionality to truncate/filter specific headers/cookies for logging purposes.

     

    I suggest that you raise a service request with F5 Support requesting a Feature Enhancement for selective header/cookie truncation (that do not cause violations) when logging requests.