How to add client IP to idp-audit.log in IDP3
O'Dowd, Josh
Josh.O'Dowd at mso.umt.edu
Thu Oct 22 10:32:21 EDT 2015
Thanks Kevin,
It is helpful to have the placeholder, idp.remote_addr. I was attempting the pattern with the old {clientIP} from IdPv2, but that wasn't really working out.
-Josh
-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Kevin Foote
Sent: Wednesday, October 21, 2015 4:39 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: How to add client IP to idp-audit.log in IDP3
> On Oct 21, 2015, at 3:02 PM, O'Dowd, Josh <Josh.O'Dowd at mso.umt.edu> wrote:
>
> Good afternoon,
>
> I am looking at the /conf/audit.xml to extend the default auditing messaging to append the client IP address.
Just to follow Scott’s suggestion :-)
Clip from my logback.xml
<appender name="IDP_AUDIT" class="ch.qos.logback.core.rolling.RollingFileAppender">
<File>${idp.home}/logs/idp-audit.log</File>
<rollingPolicy class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy">
<fileNamePattern>${idp.home}/logs/idp-audit-%d{yyyy-MM-dd}.log.gz</fileNamePattern>
<maxHistory>180</maxHistory>
</rollingPolicy>
<encoder class="ch.qos.logback.classic.encoder.PatternLayoutEncoder">
<charset>UTF-8</charset>
<Pattern>%msg|%mdc{idp.remote_addr}|%n</Pattern>
</encoder>
</appender>
--------
thanks
kevin.foote
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list