Forum Discussion

Moustafa's avatar
Moustafa
Icon for Nimbostratus rankNimbostratus
Jun 08, 2020

I Rule to log source_ip , time_stamp, public_ip

Hello ,

 

i need to develop i rule to log the accepted connections to the VS as following parameters .

 

wan_source_ip address , Geolocation , time stamp

 

Regards,

2 Replies

  • Make sure your BIGIP is having latest GeoDB then you will able to get correct details but it will be CPU intensive.

    Thanks

  • hi Samir ,

    thanks for information . i tried the below I rule i think its working .

     

    when CLIENT_ACCEPTED {

      log local0. "Source IP address and Port is [IP::client_addr]:[TCP::client_port]"

    log local0. "cloc [whereis [IP::client_addr] country]"

    log local0. "Geo Client ([IP::client_addr]) detected"

      }