Splunk Search

Citrix Netscaler: How to log external IP addresses

eberg1
Engager

Hey there,

I am needing to look at what ip's our users are using to connect to our Citrix VD website.

I've been trying to take a crack at it for almost a week now and have exhausted all my ideas.

Any ideas?

0 Karma
1 Solution

NetFlow_Logic
Contributor

Have you considered Citrix Netscaler IPFIX (AppFlow)?

NetFlow Optimizer is one of the alternatives.
https://citrixready.citrix.com/netflow-logic-corporation/netflow-optimizer.html

Here the link to download NFO, as well as information on how to install and configure it, and get free evaluation license.
https://www.netflowlogic.com/downloads/
Should you have any questions, please don’t hesitate to reach out and we’ll be happy to help you.

View solution in original post

n90x
New Member

use client_IP on netScaler to track this information, it will be recorded in syslog which can be sent to SPLUNK,use client_IP

0 Karma

NetFlow_Logic
Contributor

Have you considered Citrix Netscaler IPFIX (AppFlow)?

NetFlow Optimizer is one of the alternatives.
https://citrixready.citrix.com/netflow-logic-corporation/netflow-optimizer.html

Here the link to download NFO, as well as information on how to install and configure it, and get free evaluation license.
https://www.netflowlogic.com/downloads/
Should you have any questions, please don’t hesitate to reach out and we’ll be happy to help you.

Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

  Ready to master Kubernetes and cloud monitoring like the pros?Join Splunk’s Growth Engineering team for an ...

Wrapping Up Cybersecurity Awareness Month

October might be wrapping up, but for Splunk Education, cybersecurity awareness never goes out of season. ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...