ProfessionalCommunity Edition

Burp Logger view filter

• Last updated: October 29, 2024

• Read time: 3 Minutes

You can use the view filter to control which captured items Burp Logger displays. For more information on which items Logger captures, see Burp Logger capture filter.

Items that are not displayed because of view filter settings can be accessed by removing the view filter.

You can configure the Logger view filter in two different ways:

• Settings mode enables you to configure a view filter using checkboxes and drop-downs.
• Bambda mode enables you to write a powerful custom view filter using Burp's Java-based Bambdas.

To filter which of the captured items are displayed, click on the View filter bar. This opens the Logger view filter window.

The View filter bar only appears when there is one or more items recorded in Logger.

Settings mode

On the Settings mode tab, you can apply a view filter using the following options:

Filter by request type

Choose which request types Logger displays. You can select from:

• Show only in-scope items. For more information on how to set your scope, see Target scope.
• Hide items without responses.
• Show only parameterized requests.

Filter by MIME type

Choose which MIME type Logger displays, such as HTML or XML.

Filter by status code

Choose which status codes Logger displays.

Filter by tool

Choose which Burp tools Logger displays items from. This enables you to ignore traffic from a noisy tool, or direct Logger to display traffic from one tool only. By default, all tools are selected.

Filter by search term

Professional

Choose to display only records that contain a specific search term:

• Regex. Specify whether the search term is a literal string or a regular expression.
• Case sensitive. Specify whether the search term is case-sensitive.
• Negative search. Display only items that do not match the search term.

Filter by file extension

Choose which types of file Logger displays, such as PHP or CSS.

Filter by annotation

Choose whether to show only items that have been annotated, either by a comment or highlight. To learn how to annotate items, see Working with Burp Logger entries.

Bambda mode

On the Bambda mode tab, you can write Java-based Bambdas to apply custom view filters to Logger.

Two objects of the Montoya API are available to help you write your Bambdas:

• LoggerHttpRequestResponse
• Utilities

To filter the view in Logger using a Bambda:

1. In Logger, click the View filter bar to open the Logger view filter window.

   The filter bar only appears when there are one or more items recorded in Logger.

2. In the Logger view filter window, click the Bambda mode tab.
3. Write your Bambda using Java.
4. Click Apply.

Burp compiles your Bambda and applies it to every item already captured in Logger, and to any future items captured in this project.

Example Bambda

In the example below, we'll create a Bambda that filters the Logger view to display only requests that meet the following criteria:

• The request must have a response.
• The time between Burp sending the request and the start of the response must be greater than 1000 ms.

In this example, our Bambda is:

if (!requestResponse.hasResponse()) { return false; } var timingData = requestResponse.timingData(); return timingData.timeBetweenRequestSentAndStartOfResponse().toMillis() > 1000;

Converting filter settings to Bambdas

If you have already used Settings mode to configure a Logger view filter, you can convert this to a Bambda.

To convert your view filter settings to a Bambda:

1. In the Logger tab, click the View filter bar to open the Logger view filter window.
2. Make changes to the filter settings (if necessary).
3. At the bottom of the Logger view filter window, click Convert to Bambda.

Your filter is now converted into a Bambda, enabling you to customize it further using Java.