All Apps and Add-ons

Splunk Add-on for F5 BIG-IP: How to configure iRules for F5 GTM? Getting "[/Common/Splunk_DNS_REQUEST] error...undefined procedure:..."

splunker12er
Motivator

Unable to configure iRules in F5 as per the steps given in the Splunk docs:

http://docs.splunk.com/Documentation/AddOns/latest/F5BIGIP/Setup#Configure_iRules_for_GTM

Error Message:

01070151:3: Rule [/Common/Splunk_DNS_REQUEST] error: /Common/Splunk_DNS_REQUEST:7: error: [undefined procedure: whereami][whereami]
/Common/Splunk_DNS_REQUEST:9: error: [undefined procedure: whoami][whoami]
/Common/Splunk_DNS_REQUEST:10: error: [undefined procedure: wideip][wideip name]
0 Karma

jkat54
SplunkTrust
SplunkTrust

according to f5 documentation, whereami, whoami, wideip are all available in F5 version 10+

0 Karma

ppohar_splunk
Splunk Employee
Splunk Employee

We are seeing similar error.
alt text

0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

Hi, what version of F5 are you on?

0 Karma

ppohar_splunk
Splunk Employee
Splunk Employee

Client is on F5 version 11.5.2 HF1.0.169.

0 Karma

jkat54
SplunkTrust
SplunkTrust

I suggest you file a case with F5 support, they can help you determine why these functions are not available in the F5.

0 Karma
Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...