Splunk Search

Citrix Netscaler: How to log external IP addresses

eberg1
Engager

Hey there,

I am needing to look at what ip's our users are using to connect to our Citrix VD website.

I've been trying to take a crack at it for almost a week now and have exhausted all my ideas.

Any ideas?

0 Karma
1 Solution

NetFlow_Logic
Contributor

Have you considered Citrix Netscaler IPFIX (AppFlow)?

NetFlow Optimizer is one of the alternatives.
https://citrixready.citrix.com/netflow-logic-corporation/netflow-optimizer.html

Here the link to download NFO, as well as information on how to install and configure it, and get free evaluation license.
https://www.netflowlogic.com/downloads/
Should you have any questions, please don’t hesitate to reach out and we’ll be happy to help you.

View solution in original post

n90x
New Member

use client_IP on netScaler to track this information, it will be recorded in syslog which can be sent to SPLUNK,use client_IP

0 Karma

NetFlow_Logic
Contributor

Have you considered Citrix Netscaler IPFIX (AppFlow)?

NetFlow Optimizer is one of the alternatives.
https://citrixready.citrix.com/netflow-logic-corporation/netflow-optimizer.html

Here the link to download NFO, as well as information on how to install and configure it, and get free evaluation license.
https://www.netflowlogic.com/downloads/
Should you have any questions, please don’t hesitate to reach out and we’ll be happy to help you.

Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...