How to get Http Request header information from the sumo logs

Comments

3 comments

  • Avatar
    Kevin Keech

    To simply find messages that contain the string "X-On-Behalf-Of" you can add that as a keyword to your search and you should then see any messages containing this string in your results. 

    As long as this information is present within your log messages posted to Sumo Logic you should be able to parse the values out using one of the documented parsing operators. If you have an example message you can share we can also assist with the parsing required. 

     

     

  • Avatar
    Vaishali Jain

    Our IIS logs doesnot capture the X-On-Behalf-Of request headers. How can i configure the sumo logs to capture X-On-Behalf-Of request header?

  • Avatar
    Kevin Keech

    This is something that would need to be configured within IIS, not within Sumo Logic. You would need to configure IIS to post this information into its logs so it can then be picked up by your Collector as part of reading those log files. 

    While not specific to the 'X-On-Behalf-Of" header, the following article may give you some pointers on how to add this header information to your IIS logs. 

    http://www.loadbalancer.org/blog/iis-and-x-forwarded-for-header/

Please sign in to leave a comment.