RSA Admin

Error Parsing Header

Discussion created by RSA Admin Employee on Mar 31, 2010
Latest reply on Jun 9, 2010 by 2QFL3LymIB6xwL5Uy73QZVQtt0E2S9rpdhju7K8M9jQ=

I'm trying to use ESI on log messages from a Breach Web Defend WAF. I cant figure out what I'm doing wrong. Every time I try to use ESI I get an "Error Parsing Header" error. I just wanted to get my feet wet here so i kept it simple by grabbing the 3 messages below. For "MessageID" I added "Successful" and "login" to form "Successful_login" but that's where it seems to be failing.

 

Anyone have any ideas? If I can't something this simple to work I'm doomed.

 

 

Mar 31 09:11:47 [10.107.0.215] Mar 31 09:11:46 10.107.0.215 Successful login 208.74.230.17 USA 90201 0 GET brand=null Informative 200 /wps/myportal/
Mar 31 09:11:52 [10.107.0.215] Mar 31 09:11:52 10.107.0.215 Successful login 72.15.108.229 USA 90201 0 GET brand=null Informative 200 /wps/myportal/
Mar 31 09:11:57 [10.107.0.215] Mar 31 09:11:56 10.107.0.215 Successful login 76.98.89.47 USA 90201 0 GET brand=null Informative 200 /wps/myportal/

Outcomes