up vote 0 down vote favorite
share [g+] share [fb]

I have some apache logs to process, and since the webserver behind two levels of reverse proxies, I am getting two IPs in the X-Forwarded-For header.. for example:

208.34.234.55, 127.0.0.1 - - [29/Oct/2009:21:38:13 -0500] "GET /monkey.html HTTP/1.0" 200 20845 0 0 "http://www.monkey.com/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.15) Gecko/2009101601 Firefox/3.0.15 (.NET CLR 3.5.30729)"

Now, how do I filter this in Urchin (or remove this in Apache logging) so, 127.0.0.1 is removed from processing.

Currently urchin is not able to recognize the multuple IP address so it does not log the remote IP

link|improve this question
feedback

1 Answer

up vote 0 down vote

Can you post the LogFormat from your config file?

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.