Filtering Client IP from Access Log for Urchin
- by Ram Prasad
I have some apache logs to process, and since the webserver behind two levels of reverse proxies, I am getting two IPs in the X-Forwarded-For header.. for example:
208.34.234.55, 127.0.0.1 - - [29/Oct/2009:21:38:13 -0500] "GET /monkey.html HTTP/1.0" 200 20845 0 0 "http://www.monkey.com/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.15) Gecko/2009101601 Firefox/3.0.15 (.NET CLR 3.5.30729)"
Now, how do I filter this in Urchin (or remove this in Apache logging) so, 127.0.0.1 is removed from processing.
Currently urchin is not able to recognize the multuple IP address so it does not log the remote IP