Working with WebTrends

Hi Michael -

 

 

No iRule required for this one...

 

 

You can either set the server default gateway to the LTM internal floating self-IP address and eliminate the SNAT automap configuration, or you can insert an X-Forwarded-For header in the HTTP profile applied to the virtual server.

 

 

To log the XFF address instead of the L3 source IP, use the F5-supplied ISAPI filter found on the LTM filesystem @ /var/windlls/F5LogHeader.dll. A configurator executable is also supplied: /var/windlls/F5LogHeaderConfig.exe.

 

 

HTH

 

/deb

Keep in mind that the F5LogHeader isapi filter will only log the header value to a disk file, it will not automatically update the IIS logs. For that, take a look at the F5XForwardedFor filter I wrote and put in the iControl codeshare section of DevCentral

 

 

http://devcentral.f5.com/Default.aspx?tabid=38

 

Click here

 

 

This will take the X-Forwarded-For header value and insert it in the c-ip log value when inserting into the web logs.

 

 

The source is included if you find any issues or need to modify it.

 

 

-Joe

I can see my real IP triffic but How do I now get rid of the F5 keep alive request information in the IIS logs. Webtrends counts it's page views by the lines in the IIS logs. I do not want to pay for my own generated traffic. I only want to index real user traffic.

 

 

Does anyone have a script to remove the F5 traffic by IP?

Create a dummy file in the IIS wwwroot directory and then under the properties of that file (within the IIS Manager, not the file manager) uncheck the Log Visits field. Then setup your health monitor to grab this file.

Hi,

 

Sorry to revive an old thread, but I need to do the exact same thing but with Sun Web Server. I wrote an irule that writes the traffic in the same format of sun web server log but this has two problems, first, it seems that my irule isn't logging all the url's it should (which probably is a bug in my irule) and second, as the output of an irule gets written to a log file through syslog, I had to do a program that parses the log file and removes the text added at the beginning of each line by syslog. It's too much of a hassle to be able to process the log later with webtrends.

 

Now while lurking at te forum I saw this post and thought it could be a better alternative. Any ideas ?