Auditing IP Address

Cantor, Scott cantor.2 at osu.edu
Thu Apr 14 11:13:26 EDT 2016


> We are interested in logging source IP in audit logs to facilitate forensic
> investigations. I assumed would be straightforward to add the %a audit field
> to log the source IP, but I've ended up with little to show for my efforts. It
> appears that the only way to get the source IP is thus:

It is that simple, I'm doing it now. ;-)

> PRC->SpringRequestContext->... lots of drilling...->HttpServletRequest-
> >getRemoteAddr()

I would assume that's where I'm getting it from, but I can check. But it should be built in.

Also, it's not really done like that. We inject the servlet request into any bean that needs it, so it's just a direct access via a property.

-- Scott




More information about the dev mailing list