Kibana' remoteAddress & userAgent

Elastic Stack Kibana
1

I'm looking at Kibana's logs and I'm seeing following:

kibana11-custom | {"type":"response","@timestamp":"2017-12-14T16:31:29Z","tags":,"pid":1,"method":"get","statusCode":401,"req":{"url":"/api/status","method":"get","headers":{"host":"localhost:5601","user-agent":"Go-http-client/1.1","accept-encoding":"gzip"},"remoteAddress":"172.18.0.1","userAgent":"172.18.0.1"},"res":{"statusCode":401,"responseTime":97,"contentLength":9},"message":"GET /api/status 401 97ms - 9.0B"}

I have nginx in front of Kibana,

how do I fix remoteAddress and userAgent?

2

That property is set by Hapi and I don't think we can change it. Does your nginx proxy include an x-forwarded-for header? I'd expect it to show up in the headers section, but if not we could probably make that happen.

3

@Bargs

I added following into my nginx configuration file:

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

Thanks!

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.