Search results matching tag 'logging'

logging - what gets logged? how? where? iis 7.5 2008 R2 web edition

gerryLowry — Thu, 22 Oct 2009 14:05:26 GMT

Hi,

i'm running iis 7.5 on win 2008 R2 web edition.

i've turned on HTTP logging .. i assume this will give me stats on visitors, etc.

what gets logged?

how?

where?

how to i read the logs, get reports, et cetera?

logging the POST content of a web services request

bobjase — Wed, 21 Oct 2009 15:43:10 GMT

I am trying to debug some issues we have been having with web services.

The advanced logging seems great, but I want to know if there is any way to log the actual POSTed data of the http request into the logfile.

I understand that, in theory, the post could possibly contain an entire file or set of files, but that is not the case here. This is just web service requests and I am having a terrible time debugging them. If i could just see what the heck was being sent, I am confident that I could resolve it.

Thank you

Custom Logging configured but not able to see bytes sent

thaichi23 — Tue, 20 Oct 2009 11:00:36 GMT

Hello all,

I have done all the steps to enable ODBC logging in IIS7. I can see that it is in fact working and recording information in SQL but for bytes sent, it is not showing anything. The default fields are fine but I would like for it to record bytes sent as well because that is important.

Unfortunately the "select fields" button is grayed out so I know I'll have to do it with an appcmd statement. What would be the appcmd statement to change the logExtFileFlags?

Edit: I have been hacking away at the applicationhost.config file and added bytessent and bytesrecv to all the logs and still no data shows up in my sql database.

Also another thing I ran into is that for some reason it will not show the name of the document if it was clicked on. It only shows the url to the website in which it was accessed and not the actual file name. Help please! This is killing me!

Thank you,

Nat Sirimaturos

How do I configure IIS 5.1 to generate security events on configuration change

mimatas — Mon, 19 Oct 2009 22:29:30 GMT

Hello,

This may be a really stupid / simple question, but I've spent hours scouring google and bing to no avail.

I'm deploying a system in a multi-user environment with somewhat restrictive security requirements. As part of this deployment, I will be restricting access to the IIS Manager application (iis.msc) to only an administrators group (using windows file permissions, as that's currently the only way I know how). However, in addition to that, I would like to have a security event logged to the security event viewer whenever an administrator makes changes to the IIS configuration. In an ideal world, I'd like the event to be as specific as possible with respect to the settings modified... however, I'm willing to settle for just a record of the user that made the change.

I know I can audit read access to iis.msc using the generic windows file auditing, which will tell me whenever an admin tries to run iis.msc, but doesn't tell me whether or not something was changed. Is there a way to audit changes to IIS configurations (specifically, to directory security settings)?

If it helps, I'm using IIS 5.1 on XP, though this will likely be deployed on a 2003 machine, as well as possible deployments using IIS 6 or 7 (still TBD) on server 2008.

Thanks in advance for the help,

Mim

W3C Fields to log in IIS

Noorish — Fri, 25 Sep 2009 19:57:04 GMT

Hello All,

I would like to enable logging of the below fields in IIS for all incoming requests from clients:

- Computer Name (Not enabled by default using the "cs-host" field)
- IP Address (Enabled by default using the "c-ip" field)

I have enabled logging of the computer name but it's not showing in the logs, am I forggeting something?

Also, is there away to log these information without the use of IIS? (maybe using a tool)

Re: Logging vs. kernel mode caching

LesterDK — Wed, 19 Aug 2009 05:37:28 GMT

Sure I can, try atleast.

Been a while, so cannot remember if this was the actual site that helped me getting it to work, but this was exactly our error. http://mattlog.net/2009/04/16/iis-odbc-logging-event-id-1016-error-data-80070057/ ODBC logging failing and warnings added in eventviewer. Did what Matt he is also showing as the solution, enabled the custom logging feature and ODBC logging started working.

If I recall it right, the ODBC logging had to be enabled via some appCmd and there is no kind of warning, adding the ODBC logging feature does not automatically add the custom logging feature or state that it is depending on that to work.

Though this may or may not be correct, it did indeed solve the problem for us. Of course it could be something else than the custom logging feature itself that did the trick, but whatever it was, it got active when that specific feature was added.

IIS7.0 Logs format and IIS7.5 different?

ysfozy — Wed, 24 Jun 2009 11:49:02 GMT

Hello,

Yesterday, I moved my website to IIS7.5 on W2K8 R2 Standard. But now I couldn't parse logs because log format is different.

IIS7.0 Hourly log format: u_ex090506

When I was at IIS7, IIS was updating same log file and I can parse that with a parser. But now, IIS is creating different log files for every hours.

IIS7.5 Hourly log format: u_ex09050600, u_ex09050601, u_ex09050602, u_ex09050603..

I don't want to see log files seperately. Is that possible to change this on IIS7.5?

Capturing User Session Details

juststeve — Mon, 22 Jun 2009 15:28:13 GMT

This question could be slightly ot for this forum but it's dead on descriptively - apologies in advance if admins need to move it.

I have a relatively low-traffic site and, at least at the initial launch, i'd go so far as to say i'd like to play-back a given user session.

Short of that, I'm looking for utilities and strategies that records users' interactions within my site - somewhere beyond raw log format - or even what I can produce with Log Parser on an ad hoc basis. Am willing to consider 3rd party $$ utilities but they have to be in the sub-enterprise bin. ;)

In case its relevant, the site is an asp.net mvc web app.

mny thx

--steve...

How to exclude my own IP address from logs?

Synapse Syndrome — Sat, 20 Jun 2009 03:19:56 GMT

This may be the wrong forum section to ask this, but I hope someone here can help...

I look at my own sites quite a bit, when I am working on them. This effects the logs.

I would like to be able to somehow exclude my own IP address from the IIS logs, or remove the entries in some automated way. I know some NT shell scripting; could the solution lie in that area?

The IIS server has the same IP address as the machine I am accessing it from, through the internet (using NAT). This problem is made a bit more complicated by the fact that I have a dynamic IP address that changes everytime I reboot the router.

Any ideas? Thanks.

Re: Error with logging?

ruslany — Thu, 18 Jun 2009 17:49:37 GMT

The originally requested url should be logged. I just tried it with URL Rewrite 1.1 and cs-uri-stem in the log file contains "/". How do your rewrite rules look like?