The starts_with()
function checks if a given value starts with a specified prefix.
starts_with(value, prefix)
value
: The value to check (field name, bytes)prefix
: The prefix to match against (literal bytes)Returns a boolean value: true
if the value starts with the specified prefix, false
otherwise.
starts_with(http.request.uri.path, "/api/") // Checks if the URI path starts with "/api/"