[mod-security-users] Logging real ip behind proxy

[Alexandros K. <ale...@me...>]

Hello,
I'm using Mod Security with IIS 10.
When a rule is triggered, mod security creates an event log on event viewer on Windows.
This log contais the REMOTE_ADDR value, but since we are behind a proxy (Cloudflare) i would like it to log a custom header (CF_Connecting_IP) so we get the real client IP.
Is it possible to do that?
Thanks
Alex