pem reporting format-script
pem reporting format-script(1)BIG-IP TMSH Manualpem reporting format-script(1)
NAME
format-script - Configures format scripts for the Policy Enforcement
Manager (PEM).
MODULE
pem reporting
SYNTAX
Modify the format-script component within the pem reporting module
using the syntax shown in the following sections.
CREATE/MODIFY
create format-script [name]
modify format-script [name]
options:
app-service [[string] | none]
definition [string]
description [string]
edit format-script [ [ [name] | [glob] | [regex] ] ... ]
options:
all-properties
non-default-properties
DISPLAY
list format-script
list format-script [ [ [name] | [glob] | [regex] ] ... ]
show running-config format-script
show running-config format-script [ [ [name] | [glob] | [regex] ] ... ]
options:
all-properties
non-default-properties
one-line
partition
DELETE
delete format-script [name]
Note: You must remove all references to a format script object before
you can delete it.
DESCRIPTION
You can use the format-script component to create scripts for HSL
reporting. The scripts use TCL syntax and define a custom format that
is applied in an enforcement policy rule. The format and fields
available differ depending on whether the rule specifies session-based
or flow-based reporting.
EXAMPLES
create format-script fm1 { definition { return "(flow app_id[PEM::flow
stats reported app-id], bytes-in:[PEM::flow stats reported bytes-in])"
} }
Creates a PEM reporting format script named fm1.
delete format-script fm1
Deletes the format script named fm1.
list format-script fm1
Displays the properties of the format script named fm1.
OPTIONS
app-service
Specifies the name of the application service to which the object
belongs. The default value is none. Note: If the strict-updates
option is enabled on the application service that owns the object,
you cannot modify or delete the object. Only the application
service can modify or delete the object.
definition
Specifies a script using TCL syntax that defines a custom format
for HSL reporting applied in an enforcement policy rule. The
format and fields available differ depending on whether you are
using session-based or flow-based reporting in the rule.
Session-based formats:
The options are:
app-id
Specifies the application id of the session record.
bytes-in
Specifies the aggregate incoming bytes of the session.
bytes-out
Specifies the aggregate outgoing bytes of the session.
calling-station-id
Specifies the calling station Id.
called-station-id
Specifies the called station Id.
flows-concurrent
Specifies the number of concurrent flows in the session.
flows-duration
Specifies the duration of the flow in the session.
flows-ended
Specifies the number of flows ended in the session.
flows-new
Specifies the number of new flows in the session.
last-sent-sec
Specifies the value of seconds of the timestamp since
the previous record was sent.
param-3gpp
Specifies the comma-separated string of the value of
imsi, imeisv, tower-id, and user-name.
record-reason
Specifies the reason for sending report. The values are
1: period time, 2: volume threshold, 3: subscriber
logout, 4: inactivity.
record-type
Specifies the type of the session-based record (always
3).
report-id
Specifies the report Id.
report-version
Specifies the report version.
subscriber-id
Specifies the subscriber id.
subscriber-id-type
Specifies the subscriber id type (e164, imsi, nai, or
private).
timestamp
Specifies the seconds value of the timestamp when the
record was generated. The Unix epoch is
1970-01-01T00:00:00Z.
timestamp-milliseconds
Specifies the milliseconds value of the timestamp when
the record was generated.
Note:Recommend not to use the following options. They are
available for backward compatibility.
last-send-usec
Specifies the value of microseconds of the timestamp
since the previous record was sent.
rec-reason
Specifies the reason for sending report. The values are
1: period time, 2: volume threshold, 3: subscriber
logout, 4: inactivity.
rec-type
Specifies the type of the session-based record (always
3).
subs-id
Specifies the subscriber id.
subs-id-type
Specifies the subscriber id type (e164, imsi, nai, or
private).
timestamp-sec
Specifies the seconds value of the timestamp when the
record was generated. The Unix epoch is
1970-01-01T00:00:00Z.
timestamp-usec
Specifies the microseconds value of the timestamp when
the record was generated.
Flow-based formats:
The options are:
app-id
Specifies the application id of the flow record.
bytes-in
Specifies the aggregate incoming bytes of the flow.
bytes-out
Specifies the aggregate outgoing bytes of the flow.
dst-ip
Specifies the destination ip address of the flow.
dst-port
Specifies the destination port of the flow.
flow-start-milli-seconds
Specifies the milliseconds value of the timestamp when
the flow starts.
flow-start-time-sec
Specifies the seconds value of the timestamp when the
flow starts. The Unix epoch is 1970-01-01T00:00:00Z.
flow-end-milli-seconds
Specifies milliseconds value of the timestamp when the
flow ends.
flow-end-time-sec
Specifies the seconds value of the timestamp when the
flow ends. The Unix epoch is 1970-01-01T00:00:00Z.
proto
Specifies the protocol of the flow.
record-type
Specifies the type of the flow-based record. The value
is 0: flow init, 1: flow interim, and 2: flow end.
report-id
Specifies the report Id.
route-domain
Specifies the route domain Id of the traffic.
report-version
Specifies the report version.
src-ip
Specifies the source ip address of the flow.
src-port
Specifies the destination port of the flow.
subscriber-id
Specifies the subscriber id.
subscriber-id-type
Specifies the subscriber id type (e164, imsi, nai, or
private).
timestamp
Specifies the of seconds value of the timestamp when the
record was generated. The Unix epoch is
1970-01-01T00:00:00Z.
timestamp-milliseconds
Specifies the milliseconds value of the timestamp when
the record was generated.
transactions
Specifies the number of transactions in the flow.
urlcat-id
Specifies the unique number that represents the first
(most relevant) URL category that is classified for the
flow.
vlan-id
Specifies the vlan Id of the traffic.
Note:Recommend not to use the following options. They are
available for backward compatibility.
flow-start-time-usec
Specifies microseconds value of the timestamp when the
flow starts.
flow-end-time-usec
Specifies microseconds value of the timestamp when the
flow ends.
rec-type
Specifies the type of the flow-based record. The value
is 0: flow init, 1: flow interim, and 2: flow end.
subs-id
Specifies the subscriber id.
subs-id-type
Specifies the subscriber id type (e164, imsi, nai, or
private).
timestamp-sec
Specifies the of seconds value of the timestamp when the
record was generated. The Unix epoch is
1970-01-01T00:00:00Z.
timestamp-usec
Specifies the microseconds value of the timestamp when
the record was generated.
description
Specifies a user-defined description.
SEE ALSO
create, delete, edit, glob, list, modify, pem forwarding-endpoint, pem
interception-endpoint, pem listener, pem policy, pem profile diameter-
endpoint, pem profile spm, pem service-chain-endpoint, pem subscriber,
pem subscribers, regex, show, tmsh
COPYRIGHT
No part of this program may be reproduced or transmitted in any form or
by any means, electronic or mechanical, including photocopying,
recording, or information storage and retrieval systems, for any
purpose other than the purchaser's personal use, without the express
written permission of F5 Networks, Inc.
F5 Networks and BIG-IP (c) Copyright 2012-2013, 2016. All rights
reserved.
BIG-IP 2017-03-02 pem reporting format-script(1)