Filtering Client IP from Access Log for Urchin
Posted
by Ram Prasad
on Server Fault
See other posts from Server Fault
or by Ram Prasad
Published on 2009-10-30T03:17:45Z
Indexed on
2010/03/14
17:05 UTC
Read the original article
Hit count: 265
I have some apache logs to process, and since the webserver behind two levels of reverse proxies, I am getting two IPs in the X-Forwarded-For header.. for example:
208.34.234.55, 127.0.0.1 - - [29/Oct/2009:21:38:13 -0500] "GET /monkey.html HTTP/1.0" 200 20845 0 0 "http://www.monkey.com/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.15) Gecko/2009101601 Firefox/3.0.15 (.NET CLR 3.5.30729)"
Now, how do I filter this in Urchin (or remove this in Apache logging) so, 127.0.0.1 is removed from processing.
Currently urchin is not able to recognize the multuple IP address so it does not log the remote IP
© Server Fault or respective owner