Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1, 13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1
Fixed In:
14.0.0
Opened: Dec 18, 2015 Severity: 3-Major
ASM logging terminates the URL with the number sign '#' if it exists. The part after the '#' is logged as the query string.
The full HTTP Request line does not get logged as expected.
-- HTTP Request arrives into ASM. -- The URL contains a '#', for example: GET /something/something/dark/side#theforce HTTP/1.1 The full request URL needs to get logged in remote logging.
There is no workaround at this time.
A new remote logging field was added, 'fragment'. ASM is now logging the part after the '#' in this field.