IIS Visitor report using c-ip instead of source-ip

Avatar

I need the visitor report to see who is hitting the IIS server the most but the visitor report is not using the last field source-ip from IIS log.  So the Visitor report's c-ip is load balancer IP which doesn't give me any details.

How can I change that behavior?


cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken Source-IP