Forum Discussion
gkorah_32913
Nimbostratus
NimbostratusLogging options per VIP
Looking for a solution that will enable me to capture the transaction logs for a particular VIP & also retain the source IP for audit purposes.
I have tried the x-forwarder option in the HTTP profile, but when I look at the IIS logs, i still get to see the self IP of the F5.
Any help on this is much appreciated.
Thx.
5 Replies
- Chris_Miller
Altostratus
Crazy question - can you make sure the http profile you modified to enable "x-forwarded-for" is applied to your VIP?
Otherwise - maybe your logs need some help - what version of IIS are you running?
This might be useful if you're on 7
http://devcentral.f5.com/weblogs/Joe/archive/2009/12/23/x-forwarded-for-http-module-for-iis7-source-included.aspx 
Michael_YatesWhen using X-Forward, the true client IP Address isn’t automatically presented to the destination server (If it was there might be some routing problems and such as broken routes).
The Client IP Address is actually put into the Header, so you have to go and retrieve it.
Joe created ISAPI Filter that you can configure inside of IIS to do this for you. See this post: http://devcentral.f5.com/weblogs/joe/archive/2005/09/23/1492.aspx
gkorah_32913Yep..checked the option again & it's applied to the VIP. The web servers are running IISv7.- gkorah_32913just out of curiosity, where does the LTM write the logs for all the VIPs configured ? is there a specific file under /var/logs/ <> that I can look for if I have to track an IP ?
- Michael_YatesOK. If your running IIS7, check out this link:
http://devcentral.f5.com/weblogs/Joe/archive/2009/12/23/x-forwarded-for-http-module-for-iis7-source-included.aspx
Logs are put in the /var/logs/ltm log by default. This is the same log that the .local0 logging is sent to from an iRule.
