IIS 5 & IIS 6
Scanning IIS 6 logs for application activity
Re: Scanning IIS 6 logs for application activity
Sep 12, 2018 11:21 PM|lextm|LINK
The setting "centralLogFileMode" controls how IIS stores log entries, and you can only choose from per site, or per server.
If you want to analyze based on application/virtual directory, you have to build your own extra logic to associate "cs-uri-stem" with the actual applications/virtual directories under the site.