How to add client IP to idp-audit.log in IDP3

Cantor, Scott cantor.2 at osu.edu
Wed Oct 21 18:27:28 EDT 2015


On 10/21/15, 6:02 PM, "users on behalf of O'Dowd, Josh" <users-bounces at shibboleth.net on behalf of Josh.O'Dowd at mso.umt.edu> wrote:



>Good afternoon,
> 
>I am looking at the /conf/audit.xml to extend the default auditing messaging to append the client IP address.

Using the MDC support and the idp.remote_addr field defined for that is the simplest way to do that, as long as you can live with it appearing before or after the formatted message.

I'm a bit unsure why I didn't include that as an audit field, you can request that if you want.

I also don't seem to have documented all the built in audit fields either, I must have forgotten to get back to it.

>I am seeing in the IDP3 docs that logging can be extended by writing a ‘function’, or Function<ProfileRequestContext,Object> and instantiating in one of the available field extractor maps in audit.xml.  Is this referring to an implementation of a java.util.function in JAVA 8?

No, Guava's Function interface.

-- Scott



More information about the users mailing list