Hostname caching example

This example shows how to manage hostnames that are stored in a cache file, where the cache is updated hourly.

The cache is stored as IP_ADDRESS HOST_NAME. Use a TRANSFORM action to move the IP address in the cache to HOST NAME, which you can then use as the output value for all IP_ADDRESS TRANSFORM actions.

Session level criteria: None.
Rule action: TRANSFORM ANALYZED CLIENT IP
- Source = CLIENT HOST NAME
- Search prefix = ?
- Output format = (.*)

SR language example

SR_POLICIES
{
    IF (*)
    {
        TRANSFORM_ANALYZED_CLIENT_IP SEARCH_PREFIX = '?' SOURCE = CLIENT_HOST_NAME OUTPUT_FORMAT = '(.*)' 
  
    }

}