Application Delivery Management

Logstream overview

October 14, 2020

Contributed by:

S R L

Citrix ADC instances generate AppFlow records and are a central point of control for all application traffic in the data center. IPFIX and Logstream are the protocols that transport these AppFlow records from Citrix ADC instances to Citrix ADM. For more information, see AppFlow.

IPFIX is an open Internet Engineering Task Force (IETF) standard defined in RFC 5101. IPFIX uses UDP protocol which is unreliable transport protocol used for data flow in one direction. Since IPFIX uses UDP protocol, adhering to IPFIX standard results in processing more resources in Citrix ADM.
Logstream is a Citrix-owned protocol that is used as one of the transport modes to efficiently transfer the analytics log data from Citrix ADC instances to Citrix ADM. Logstream uses reliable TCP protocol and requires lesser resources in processing the data.

For Citrix ADC between 11.1 Build 47.14 and 11.1 Build 62.8, Logstream is the default transport mode for enabling Web insight (HTTP) and IPFIX is the only transport mode for enabling other insights. For Citrix ADC version starting from 12.0 to latest version, you can select either Logstream or IPFIX as the transport mode.

Note

The Citrix ADM version and build should be equal to or higher than your Citrix ADC version and build. For example, if you have installed Citrix ADC 12.1 Build 50.28/50.31 or earlier, then ensure you have installed Citrix ADM 12.1 Build 50.39.

To use Logstream as the communication mode while enabling analytics on Citrix ADM:

Navigate to Networks > Instances > Citrix ADC, and select the Citrix ADC instance on which you want to enable analytics.
From the Select Action list, select Configure Analytics.
On the Configure Insight page:
1. Select the Application List for either Load Balancing or Content Switching.
2. Select the virtual server and click Enable AppFlow.
In the Enable AppFlow dialog box:
- Enter true in the text box
- Select Logstream as the transport mode
  
  Note
  
  Citrix recommends you to select Logstream as the transport mode.
- Select the insight type and click OK.

The following table describes the features of Citrix ADM that supports Logstream as the transport mode:

Feature	IPFIX	Logstream
Web Insight	•	•
Security Insight	•	•
Gateway Insight	•	•
HDX Insight	•	•
SSL Insight	Not supported	•
CR Insight	•	•
IP Reputation	•	•
AppFirewall	•	•
Client Side Measurement	•	•
Syslog/Auditlog	•	•

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Logstream overview

October 14, 2020

Contributed by:

S R L

October 14, 2020

Contributed by:

S R L

Logstream overview

In this article