http_stat_msg
The http_stat_msg sticky buffer contains the status text field of an HTTP response status line. This includes values such as OK, Forbidden, and Not Found.
Format:
http_stat_msg;
Examples:
http_stat_msg;
content:"OK";
http_stat_msg;
content:"Forbidden";