hi @roopeshetty
try this on the heavy forwarder
transforms.conf
[setnull]
REGEX = .
DEST_KEY = queue
FORMAT = nullQueue
[setparsing]
REGEX = result\=200
DEST_KEY = queue
FORMAT = indexQueue
[cloudnull]
REGEX = .
DEST_KEY = queue
FORMAT = nullQueue
[cloudparsing]
REGEX = result\=pass
DEST_KEY = queue
FORMAT = indexQueue
props.conf
[alibaba:cloudfirewall]
TRANSFORMS-set= cloudnull,cloudparsing
[alibaba:waf]
TRANSFORMS-set= setnull,setparsing
hi @roopeshetty
try this on the heavy forwarder
transforms.conf
[setnull]
REGEX = .
DEST_KEY = queue
FORMAT = nullQueue
[setparsing]
REGEX = result\=200
DEST_KEY = queue
FORMAT = indexQueue
[cloudnull]
REGEX = .
DEST_KEY = queue
FORMAT = nullQueue
[cloudparsing]
REGEX = result\=pass
DEST_KEY = queue
FORMAT = indexQueue
props.conf
[alibaba:cloudfirewall]
TRANSFORMS-set= cloudnull,cloudparsing
[alibaba:waf]
TRANSFORMS-set= setnull,setparsing
thanks a lot aasabatini. Its working now as expected. Thanks again.