Microsoft IIS Server Configuration
This package supports a custom W3C format of IIS access logs and the default IIS error (HTTPERR) logs.
The package dashboards assume certain fields exist and make use of them in many widgets. If these fields are not present, some widgets may not display data or be incomplete.
If your logs use a custom format that does not match those expected by the package parsers, you can see the Extending Parsers for Custom Logs section for how to map your own log format to the fields expected in this package.
Configuring Log Formats - Access Log
The IIS access log parser expects logs in a custom W3C format with the following fields:
For a standard Windows Server, the default log location is:
c:\inetpub\logs\LogFiles\ This IIS
package expects logs in
format with following fields:
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
IIS allows you to choose which IIS fields to log in the access logs. Select the above fields, in that order, if not already configured in this way.
For explanations on the various fields refer to W3C fields For more information about configuring access logs refer to IIS Enhanced Logging.
Error Log The default HTTP Error log file location is:
This IIS package expects error logs in the following format:
#Fields: date time c-ip c-port s-ip s-port cs-version cs-method cs-uri streamid sc-status s-siteid s-reason s-queuename
For information on how to configure error logs, and for more details on the various fields and their significance, refer to IIS Error Logs.