Splunk Search

Citrix Netscaler: How to log external IP addresses

eberg1
Engager

Hey there,

I am needing to look at what ip's our users are using to connect to our Citrix VD website.

I've been trying to take a crack at it for almost a week now and have exhausted all my ideas.

Any ideas?

0 Karma
1 Solution

NetFlow_Logic
Contributor

Have you considered Citrix Netscaler IPFIX (AppFlow)?

NetFlow Optimizer is one of the alternatives.
https://citrixready.citrix.com/netflow-logic-corporation/netflow-optimizer.html

Here the link to download NFO, as well as information on how to install and configure it, and get free evaluation license.
https://www.netflowlogic.com/downloads/
Should you have any questions, please don’t hesitate to reach out and we’ll be happy to help you.

View solution in original post

n90x
New Member

use client_IP on netScaler to track this information, it will be recorded in syslog which can be sent to SPLUNK,use client_IP

0 Karma

NetFlow_Logic
Contributor

Have you considered Citrix Netscaler IPFIX (AppFlow)?

NetFlow Optimizer is one of the alternatives.
https://citrixready.citrix.com/netflow-logic-corporation/netflow-optimizer.html

Here the link to download NFO, as well as information on how to install and configure it, and get free evaluation license.
https://www.netflowlogic.com/downloads/
Should you have any questions, please don’t hesitate to reach out and we’ll be happy to help you.

Get Updates on the Splunk Community!

Take the 2021 Splunk Career Survey for $50 in Amazon Cash

Help us learn about how Splunk has impacted your career by taking the 2021 Splunk Career Survey. Last year’s ...

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

Observability Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestSplunk APM's New Tag Filter ExperienceSplunk APM has updated ...