Functions

Functions#

The wirefilter language supports functions to aid in defining complex criteria in filtering requests and responses.

Returns true when the comparison operator in the argument returns true for any values in argument array.

any(http.request.headers["block-me"][*] == "true")

The concat() function concatenates all the argument values into a single string.

The ends_with() function returns true if the first argument (field name or bytes) ends with the second argument ( literal bytes).

For example, to match only requests with URLs ending in ".html", the following filter can be used:

ends_with(http.request.uri, ".html")

The lower() function converts the string argument to lowercase.

The starts_with() function returns true if the first argument (field name or bytes) starts with the second argument (literal bytes).

For example, to match only requests with URLs starting with "/da", the following filter can be used:

starts_with(http.request.uri.path, "/da")