Available fields and functions for HTTP request header modification

The available fields when setting an HTTP request header value using an expression are the following:

• cf.bot_management.*
• cf.client.bot
• cf.threat_score
• cf.colo.id
• cf.edge.server_ip
• cf.edge.server_port
• cf.edge.client_port
• cf.zone.name
• cf.metal.id
• cf.ray_id
• cf.tls_client_auth.*
• http.cookie
• http.host
• http.referer
• http.request.headers
• http.request.accepted_languages
• http.request.method
• http.request.timestamp.sec
• http.request.timestamp.msec
• http.request.full_uri
• http.request.uri
• http.request.uri.*
• http.request.version
• raw.http.request.full_uri
• raw.http.request.uri
• http.user_agent
• http.x_forwarded_for
• ip.src
• ip.src.lat
• ip.src.lon
• ip.src.city
• ip.geoip.*
• ssl

Refer to Fields for reference information on these fields.

For information on the available functions, refer to Functions .