 | 1 | initial version |
Change 31184 added a field http.response_for.uri that contains as much of the request URI as is available.
This could be used in the first part of your filter as:
http.response_for.uri contains "iwaxx" || ...
Unfortunately the change hasn't (yet) been backported so you'll need to either use one of the automated builds produced since the change was merged, or build your own version from master.