Forum Discussion
Danish202_17040
Nimbostratus
NimbostratusHow to capture source IP address(clientIP) on F5 LTM .
Hi All ,
Is there any way to check clients IP(Source addresses) who is accessing F5 virtual server . I need to check clients IP(Source addresses) and confirm to my customer that they accessed o...
Sheigh_65772
Cirrus
CirrusShort answer is yes, the how depends on what data you want logged.
If you need only the IP you can do this:
when CLIENT_ACCEPTED {
log local0. "clientIP:[IP::client_addr] accessed"
}
If you also need other data such as resources you can use one of the other events such as HTTP_REQUEST:
when HTTP_REQUEST {
log local0. "clientIP:[IP::client_addr] accessed [HTTP::host][HTTP::uri]"
}
logs will be within your /var/log/ltm
Danish202_17040Nimbostratus
NimbostratusThanks a lot ..quite useful reply :)) Could you tell me the risk when I generate logs with your second rule ...Can I fix the resource or memory used for these logs ? or is there any implicit mechanisim to avoid disaster incase logs are too much ...
