log web activity from http server or bigip?

Hi everyone

 

 

I want find the best way to log the activity for an apache ihs web server.

 

 

I have the big-ip redirecting traffic to http server, but checking the access_log in this http server the incomming ip belongs to the big-ip and I would like to get the external IP client in order to identify the incoming connection from the web server.

 

 

I appreciate you recommendations because what I want to do is to setup a syslog-ng remote server to receive the apache logs directly from the http server.

 

 

Do you think it would be better to send the logs this way or should I send it directly from the big-ip?

 

 

In this case, do you think that I need an iRule and set a configuration like this:

 

 

http://www.brianyeager.org/?p=171

 

 

Thanks in advance