https://community.splunk.com/t5/Deployment-Architecture/How-do-I-index-W3C-logs-from-my-Web-Server/m-p/94946#M3491 <P>This has been address in a couple of different threads, but try starting here:</P> <P><A href="http://splunk-base.splunk.com/answers/36/how-to-extract-fields-from-iis-default-log-file-format-w3c-extended-logs-with-splunk">http://splunk-base.splunk.com/answers/36/how-to-extract-fields-from-iis-default-log-file-format-w3c-extended-logs-with-splunk</A></P> Wed, 19 Oct 2011 22:45:47 GMT jbsplunk 2011-10-19T22:45:47Z https://community.splunk.com/t5/Deployment-Architecture/How-do-I-index-W3C-logs-from-my-Web-Server/m-p/94945#M3490 <P>I'm deploying the UF to my Web Severs and I want to be able to pull W3C logs. What config settings in the UF do I need to add in order to do this? I'm deploying the UF using SCCM.</P> Wed, 19 Oct 2011 20:22:08 GMT https://community.splunk.com/t5/Deployment-Architecture/How-do-I-index-W3C-logs-from-my-Web-Server/m-p/94945#M3490 eantonio 2011-10-19T20:22:08Z https://community.splunk.com/t5/Deployment-Architecture/How-do-I-index-W3C-logs-from-my-Web-Server/m-p/94946#M3491 <P>This has been address in a couple of different threads, but try starting here:</P> <P><A href="http://splunk-base.splunk.com/answers/36/how-to-extract-fields-from-iis-default-log-file-format-w3c-extended-logs-with-splunk">http://splunk-base.splunk.com/answers/36/how-to-extract-fields-from-iis-default-log-file-format-w3c-extended-logs-with-splunk</A></P> Wed, 19 Oct 2011 22:45:47 GMT https://community.splunk.com/t5/Deployment-Architecture/How-do-I-index-W3C-logs-from-my-Web-Server/m-p/94946#M3491 jbsplunk 2011-10-19T22:45:47Z https://community.splunk.com/t5/Deployment-Architecture/How-do-I-index-W3C-logs-from-my-Web-Server/m-p/94947#M3492 <P>Can you tell me what search value I need to execute in order to tell who is accessing my Web Server?</P> Thu, 20 Oct 2011 17:18:57 GMT https://community.splunk.com/t5/Deployment-Architecture/How-do-I-index-W3C-logs-from-my-Web-Server/m-p/94947#M3492 eantonio 2011-10-20T17:18:57Z https://community.splunk.com/t5/Deployment-Architecture/How-do-I-index-W3C-logs-from-my-Web-Server/m-p/94948#M3493 <P>I'm also planning to install UF to my DMZ Servers and I need to monitor who is accessing my DMZ Servers from internal/external source. What would be the best Search Command to execute in Splunk Web Interface?</P> Thu, 20 Oct 2011 18:25:00 GMT https://community.splunk.com/t5/Deployment-Architecture/How-do-I-index-W3C-logs-from-my-Web-Server/m-p/94948#M3493 eantonio 2011-10-20T18:25:00Z