×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Ask a Question
hello007
New Member
Member since: ‎04-24-2019
‎06-05-2020
Community Statistics
Posts 1
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎04-24-2019
Activity Feed
Topics I've Started
No posts to display.
View All

Re: Anyway to see X-Forwarded-For in Splunk access...

by in Security
‎04-24-2019 07:26 PM
‎04-24-2019 07:26 PM
The log of login attempt action comes from $SPLUNK_HOME/bin/splunkd, there is no other way to modify it for showing the XFF msg. The web_access.log only log the requests which after login, not the fail login attempt. ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM