Microsoft IIS Server Configuration

This package supports a custom W3C format of IIS access logs and the default IIS error (HTTPERR) logs.

The package dashboards assume certain fields exist and make use of them in many widgets. If these fields are not present, some widgets may not display data or be incomplete.

If your logs use a custom format that does not match those expected by the package parsers, you can see the Extending Parsers for Custom Logs section for how to map your own log format to the fields expected in this package.

Configuring Log Formats - Access Log

The IIS access log parser expects logs in a custom W3C format with the following fields:

For a standard Windows Server, the default log location is: %SystemDrive%\inetpub\logs\LogFiles.

For example: c:\inetpub\logs\LogFiles\ This IIS package expects logs in W3C format with following fields:

shell
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status
sc-substatus sc-win32-status sc-bytes cs-bytes time-taken

IIS allows you to choose which IIS fields to log in the access logs. Select the above fields, in that order, if not already configured in this way.

For explanations on the various fields refer to W3C fields For more information about configuring access logs refer to IIS Enhanced Logging.

Error Log The default HTTP Error log file location is: C:\Windows\System32\LogFiles\HTTPERR

This IIS package expects error logs in the following format:

shell
#Fields: date time c-ip c-port s-ip s-port cs-version cs-method cs-uri
 streamid sc-status s-siteid s-reason s-queuename

For information on how to configure error logs, and for more details on the various fields and their significance, refer to IIS Error Logs.