<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic iis log missing time_taken field in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/iis-log-missing-time-taken-field/m-p/168159#M34046</link>
    <description>&lt;P&gt;We have multiple version of IIS but looks like an older version is missing the last field (time_taken).  We still need to determine time_taken in order to monitor the slowness of the web server etc.&lt;BR /&gt;
I was thinking of using the GET and POST methods with a combination of transaction to calculate it.&lt;/P&gt;

&lt;P&gt;Any ideas?&lt;/P&gt;</description>
    <pubDate>Mon, 28 Sep 2020 17:14:57 GMT</pubDate>
    <dc:creator>abrarfakhri</dc:creator>
    <dc:date>2020-09-28T17:14:57Z</dc:date>
    <item>
      <title>iis log missing time_taken field</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/iis-log-missing-time-taken-field/m-p/168159#M34046</link>
      <description>&lt;P&gt;We have multiple version of IIS but looks like an older version is missing the last field (time_taken).  We still need to determine time_taken in order to monitor the slowness of the web server etc.&lt;BR /&gt;
I was thinking of using the GET and POST methods with a combination of transaction to calculate it.&lt;/P&gt;

&lt;P&gt;Any ideas?&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 17:14:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/iis-log-missing-time-taken-field/m-p/168159#M34046</guid>
      <dc:creator>abrarfakhri</dc:creator>
      <dc:date>2020-09-28T17:14:57Z</dc:date>
    </item>
    <item>
      <title>Re: iis log missing time_taken field</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/iis-log-missing-time-taken-field/m-p/168160#M34047</link>
      <description>&lt;P&gt;What's your IIS version? Have you try to install the "MS Advanced Logging Module"? &lt;A href="http://www.iis.net/downloads/microsoft/advanced-logging"&gt;http://www.iis.net/downloads/microsoft/advanced-logging&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 04 Aug 2014 05:42:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/iis-log-missing-time-taken-field/m-p/168160#M34047</guid>
      <dc:creator>musskopf</dc:creator>
      <dc:date>2014-08-04T05:42:28Z</dc:date>
    </item>
    <item>
      <title>Re: iis log missing time_taken field</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/iis-log-missing-time-taken-field/m-p/168161#M34048</link>
      <description>&lt;P&gt;We figured it out.  The variable time-taken was not being set in the configurations of the IIS sites.  We will get it switch ON to begin collecting the info.&lt;/P&gt;</description>
      <pubDate>Tue, 05 Aug 2014 17:17:56 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/iis-log-missing-time-taken-field/m-p/168161#M34048</guid>
      <dc:creator>abrarfakhri</dc:creator>
      <dc:date>2014-08-05T17:17:56Z</dc:date>
    </item>
  </channel>
</rss>

