[jira] [Commented] (TS-698) LogFilter should support an actual IP type and matching rules

["Jay Tomolek (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/TS-698?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13982087#comment-13982087 ] 

Jay Tomolek commented on TS-698:
--------------------------------

hi,
i've developed a patch to handle this issue allowing MATCH operator over LogField::IP fields (chi, shi, phi).

it was implemented as LogFilterIP, quite similiar to LogFilterInt code, allowing single or multiple IP matchs (comma separated) , such as:

<LogFilter>
    <Name = "reject_localhost_requests"/>
    <Condition = "chi MATCH 127.0.0.1"/>
    <Action = "REJECT"/>
</LogFilter>

<LogFilter>
    <Name = "apache_org_responses"/>
    <Condition = "chi MATCH 192.87.106.229,140.211.11.131"/>
    <Action = "ACCEPT"/>
</LogFilter>


> LogFilter should support an actual IP type and matching rules
> -------------------------------------------------------------
>
>                 Key: TS-698
>                 URL: https://issues.apache.org/jira/browse/TS-698
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: Logging
>    Affects Versions: 2.1.6
>         Environment: N/A
>            Reporter: Eric Connell
>            Assignee: Alan M. Carroll
>            Priority: Minor
>             Fix For: sometime
>
>
> The LogFilter configuration in logs_xml.config should support a native IPv4 and IPv6 filtering.  For example, it would be handy to be able to filter out log lines from a specific server or netblock.  For example, the following config would reject log lines for all hosts in the 10/8 network:
> {code}
> <LogFilter>
>     <Name = "local_net"/>
>     <Condition = "chi MATCH 10.0.0.0/8"/>
>     <Action = "REJECT"/>
> </LogFilter> 
>       
> <LogFormat>
>   <Name = "access_log"/>
>   <Format = "%<shi>"/>
> </LogFormat> 
> <LogObject> 
>   <Format = "access_log"/>
>   <Filename = "access_log"/>
>   <Filters = "local_net"/>
> </LogObject> 
> {code} 



--
This message was sent by Atlassian JIRA
(v6.2#6252)