Configure On-premise Server Logs to Show Originating IPs of Users with X-Forwarded-For Header

OBJECTIVE: Configure On-premise server logs to show originating IPs of users with X-Forwarded-For Header

BACKGROUND:
On-premise servers do not show the originating IPs of users. This following procedure adds detail to on-premise server logs by adding the X-Forwarded-For header information to track originating IPs. This feature is especially useful for understanding the true source of client requests when working behind a proxy or load balancer.

SOLUTION:

• Create a backup of the server.xml (Location – \Connect\12.x\appserv\conf)
• In server.xml search for “org.apache.catalina.valves.AccessLogValve”:

    <Valve className="org.apache.catalina.valves.AccessLogValve" directory="../../logs/tomcat" prefix="tomcat_access." suffix=".log" pattern='%h %l %u %t %m "%U" %{BREEZESESSION}c %s %b %T' resolveHosts="false"/>

• Edit the line to include %{x-forwarded-for}i for adding X-Forwarded-For Header:
• The modified line should look like this:

    <Valve className="org.apache.catalina.valves.AccessLogValve" directory="../../logs/tomcat" prefix="tomcat_access" suffix=".log" pattern='%h %l %u %t %m "%U" %{BREEZESESSION}c %s %b %T %{x-forwarded-for}i' resolveHosts="false"/>

• Save the server.xml file.
• Restart the Adobe Connect Service.
• After the change, when users try to gain access to Adobe Connect the tomcat_access.-date-.log (Location – \Connect\logs\tomcat) will show client IP address in tomcat_access logs as follows:
  127.0.0.1 – – [23/Feb/2015:11:39:45 +0000] GET “/common/help/en/support/meeting_test.htm” breezbreezhvc7xdcgu5h3cqwm 200 16703 0.017 Mozilla/5.0 (Windows NT 6.1; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0 X-Forwarded-For: 123.456.789.012
• Before making the changes it looks like this:
  127.0.0.1 – – [23/Feb/2015:11:39:45 +0000] GET “/common/help/en/support/meeting_test.htm” breezbreezhvc7xdcgu5h3cqwm 200 16703 0.017