Splunk Search

Citrix Netscaler: How to log external IP addresses

eberg1
Engager

Hey there,

I am needing to look at what ip's our users are using to connect to our Citrix VD website.

I've been trying to take a crack at it for almost a week now and have exhausted all my ideas.

Any ideas?

0 Karma
1 Solution

NetFlow_Logic
Contributor

Have you considered Citrix Netscaler IPFIX (AppFlow)?

NetFlow Optimizer is one of the alternatives.
https://citrixready.citrix.com/netflow-logic-corporation/netflow-optimizer.html

Here the link to download NFO, as well as information on how to install and configure it, and get free evaluation license.
https://www.netflowlogic.com/downloads/
Should you have any questions, please don’t hesitate to reach out and we’ll be happy to help you.

View solution in original post

n90x
New Member

use client_IP on netScaler to track this information, it will be recorded in syslog which can be sent to SPLUNK,use client_IP

0 Karma

NetFlow_Logic
Contributor

Have you considered Citrix Netscaler IPFIX (AppFlow)?

NetFlow Optimizer is one of the alternatives.
https://citrixready.citrix.com/netflow-logic-corporation/netflow-optimizer.html

Here the link to download NFO, as well as information on how to install and configure it, and get free evaluation license.
https://www.netflowlogic.com/downloads/
Should you have any questions, please don’t hesitate to reach out and we’ll be happy to help you.

Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...