Filtering Client IP from Access Log for Urchin

Posted by Ram Prasad on Server Fault See other posts from Server Fault or by Ram Prasad
Published on 2009-10-30T03:17:45Z Indexed on 2010/03/14 17:05 UTC
Read the original article Hit count: 228

Filed under:
|
|

I have some apache logs to process, and since the webserver behind two levels of reverse proxies, I am getting two IPs in the X-Forwarded-For header.. for example:

208.34.234.55, 127.0.0.1 - - [29/Oct/2009:21:38:13 -0500] "GET /monkey.html HTTP/1.0" 200 20845 0 0 "http://www.monkey.com/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.15) Gecko/2009101601 Firefox/3.0.15 (.NET CLR 3.5.30729)"

Now, how do I filter this in Urchin (or remove this in Apache logging) so, 127.0.0.1 is removed from processing.

Currently urchin is not able to recognize the multuple IP address so it does not log the remote IP

© Server Fault or respective owner

Related posts about apache

Related posts about logging