X-Forwarded-For question
The release notes for version 8.x state it includes "Recognition of real visitor host in the X-Forwarded-For field in IIS logs". Per my earlier question / issue, you suggested using the Microsoft Advanced Logging module and replacing the "c-ip" with "x-forwarded-for" in it. How does this fix relate to that item?
The original problem appeared because the c-ip field contained the IP of the load balancer, while the real visitor IP was stored in the X-Forwarded-For field. It is a common scenario, so we added support for it in version 8.0. If there is the X-Forwarded-For field, the new version uses value from it as visitor IP instead of the c-ip field. It works automatically, it's not necessary to change any settings.