drop f5 ltm request log export · parse virtual server + pool + irule hit · runs locally
drop f5 ltm request log export · local only
heuristic screener · vendor schema varies · not definitive proof