https://community.splunk.com/t5/Getting-Data-In/How-do-you-extract-fields-from-IIS-logs/m-p/452869#M78440 <P>Good morning. </P> <P>I have to set up my universal forwarder to capture IIS logs. The problem is the fields are not extracting fully. I am not sure what files to configure to extract them properly. Any help is appreciated.</P> <P>thanks!</P> Thu, 25 Oct 2018 18:09:39 GMT davidblizzard 2018-10-25T18:09:39Z https://community.splunk.com/t5/Getting-Data-In/How-do-you-extract-fields-from-IIS-logs/m-p/452869#M78440 <P>Good morning. </P> <P>I have to set up my universal forwarder to capture IIS logs. The problem is the fields are not extracting fully. I am not sure what files to configure to extract them properly. Any help is appreciated.</P> <P>thanks!</P> Thu, 25 Oct 2018 18:09:39 GMT https://community.splunk.com/t5/Getting-Data-In/How-do-you-extract-fields-from-IIS-logs/m-p/452869#M78440 davidblizzard 2018-10-25T18:09:39Z https://community.splunk.com/t5/Getting-Data-In/How-do-you-extract-fields-from-IIS-logs/m-p/452870#M78441 <P>@davidblizzard There is a TA out there on Splunk base <A href="https://splunkbase.splunk.com/app/3185/#/details">https://splunkbase.splunk.com/app/3185/#/details</A> which works pretty good.</P> Thu, 25 Oct 2018 19:03:12 GMT https://community.splunk.com/t5/Getting-Data-In/How-do-you-extract-fields-from-IIS-logs/m-p/452870#M78441 Rob2520 2018-10-25T19:03:12Z