Logstream overview 编辑
Logstream overview
Citrix ADC instances generate AppFlow records and are a central point of control for all application traffic in the data center. IPFIX and Logstream are the protocols that transport these AppFlow records from Citrix ADC instances to Citrix ADM. For more information, see AppFlow.
IPFIX is an open Internet Engineering Task Force (IETF) standard defined in RFC 5101. IPFIX uses UDP protocol which is unreliable transport protocol used for data flow in one direction. Since IPFIX uses UDP protocol, adhering to IPFIX standard results in processing more resources in Citrix ADM.
Logstream is a Citrix-owned protocol that is used as one of the transport modes to efficiently transfer the analytics log data from Citrix ADC instances to Citrix ADM. Logstream uses reliable TCP protocol and requires lesser resources in processing the data.
For Citrix ADC between 11.1 Build 47.14 and 11.1 Build 62.8, Logstream is the default transport mode for enabling Web Insight (HTTP) and IPFIX is the only transport mode for enabling other insights. For Citrix ADC version starting from 12.0 to latest version, you can select either Logstream or IPFIX as the transport mode.
Note
The Citrix ADM version and build must be equal to or higher than your Citrix ADC version and build. For example, if you have installed Citrix ADC 12.1 Build 50.28/50.31, then ensure you have installed Citrix ADM 12.1 Build 50.39 or later.
Enable Logstream as Transport Mode
Navigate to Infrastructure > Instances, and select the ADC instance you want to enable analytics.
From the Select Action list, select Configure Analytics.
Select the virtual servers and then click Enable Analytics.
On the Enable Analytics window:
Select the insight types (Web Insight or WAF Security Violations or Bot Security Violations)
Select Logstream as Transport Mode
Note
For Citrix ADC between 11.1 Build 47.14 and 11.1 Build 62.8, Logstream is the default transport mode for enabling Web Insight (HTTP) and IPFIX is the only transport mode for enabling other insights. For Citrix ADC version starting from 12.0 to latest version, you can select either Logstream or IPFIX as the transport mode.
The Expression is true by default
Click OK
Note
If you select virtual servers that are not licensed, then Citrix ADM first licenses those virtual servers and then enables analytics
For admin partitions, only Web Insight is supported
For virtual servers such as Cache Redirection, Authentication, and GSLB, you cannot enable analytics. An error message is displayed.
The following table describes the features of Citrix ADM that supports Logstream as the transport mode:
Feature | IPFIX | Logstream |
---|---|---|
Web Insight | • | • |
Bot Security Violations | Not supported | • |
WAF Security Violations | • | • |
Gateway Insight | • | • |
HDX Insight | • | • |
SSL Insight | Not supported | • |
CR Insight | • | • |
IP Reputation | • | • |
AppFirewall | • | • |
Client Side Measurement | • | • |
Syslog/Auditlog | • | • |
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论