How to add client IP to idp-audit.log in IDP3

O'Dowd, Josh Josh.O'Dowd at mso.umt.edu
Thu Oct 22 10:32:21 EDT 2015


Thanks Kevin,

It is helpful to have the placeholder, idp.remote_addr.  I was attempting the pattern with the old {clientIP} from IdPv2, but that wasn't really working out.

-Josh

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Kevin Foote
Sent: Wednesday, October 21, 2015 4:39 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: How to add client IP to idp-audit.log in IDP3



> On Oct 21, 2015, at 3:02 PM, O'Dowd, Josh <Josh.O'Dowd at mso.umt.edu> wrote:
> 
> Good afternoon,
>  
> I am looking at the /conf/audit.xml to extend the default auditing messaging to append the client IP address.  

Just to follow Scott’s suggestion :-) 

Clip from my logback.xml


   <appender name="IDP_AUDIT" class="ch.qos.logback.core.rolling.RollingFileAppender">
        <File>${idp.home}/logs/idp-audit.log</File>

        <rollingPolicy class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy">
            <fileNamePattern>${idp.home}/logs/idp-audit-%d{yyyy-MM-dd}.log.gz</fileNamePattern>
            <maxHistory>180</maxHistory>
        </rollingPolicy>

        <encoder class="ch.qos.logback.classic.encoder.PatternLayoutEncoder">
            <charset>UTF-8</charset>
            <Pattern>%msg|%mdc{idp.remote_addr}|%n</Pattern>
        </encoder>
    </appender>



--------
thanks
 kevin.foote

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list