How to get Http Request header information from the sumo logs
I am trying to find logs which contain the X-On-Behalf-Of request header in the request for a REST based web api.
-
To simply find messages that contain the string "X-On-Behalf-Of" you can add that as a keyword to your search and you should then see any messages containing this string in your results.
As long as this information is present within your log messages posted to Sumo Logic you should be able to parse the values out using one of the documented parsing operators. If you have an example message you can share we can also assist with the parsing required. -
This is something that would need to be configured within IIS, not within Sumo Logic. You would need to configure IIS to post this information into its logs so it can then be picked up by your Collector as part of reading those log files.
While not specific to the 'X-On-Behalf-Of" header, the following article may give you some pointers on how to add this header information to your IIS logs.
http://www.loadbalancer.org/blog/iis-and-x-forwarded-for-header/
Please sign in to leave a comment.
Comments
3 comments