IIS Visitor report using c-ip instead of source-ip

Avatar
j tsai
  • updated

I need the visitor report to see who is hitting the IIS server the most but the visitor report is not using the last field source-ip from IIS log.  So the Visitor report's c-ip is load balancer IP which doesn't give me any details.

How can I change that behavior?


cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken Source-IP

Replies 3
Avatar
0
Michael

There is a limit on memory that can be used by the program as it is a 32-bit application. It is the same in the Lite version (isn't offered now) and Standard version, while the Standard version has the optimization option you have mentioned that allows processing in such case too.

Avatar
0
j tsai

Changing to X-Forwarded-For now I'm getting "Too much memory is required to analyze the log files because of a very large number of simultaneous visitors'.   I have 24GB of memory with 14GB free and 40GB of free disk space.   Any idea how much memory do I need to add?  This is a 4GB file.

I've downloaded latest version ran in standard mode and enable 'use adaptive session timeout' and it is working.

Is this limitation of the Lite version?

Is Lite version still being offered? I don't see a download.

Avatar
0
Michael

The program doesn't recognize Source-IP field as a visitor IP. You need to change the field name to Original-IP or X-Forwarded-For for it to be recognized by the program.


Customer support portal powered by UserEcho