This message was deleted.

Hi, Martin, is it always d=###& ? If it is, you would have to get it with a clean RegEx Filtering. Start is the d= and end is the &

I was too stupid to do the replace. Until I finally noticed that I don't want to replace but delete. It can be that simple when you finally understand what you actually want to do 😂 add rewrite action rwact_sharepoint_delete_d-parameter delete_all "HTTP.RES.BODY(HTTP.RES.CONTENT_LENGTH)" -search "regex(re~(d=\\w+\\&)~)"

🤘🏽