Deployment Architecture

How do I index W3C logs from my Web Server

eantonio
Path Finder

I'm deploying the UF to my Web Severs and I want to be able to pull W3C logs. What config settings in the UF do I need to add in order to do this? I'm deploying the UF using SCCM.

Tags (4)
0 Karma

jbsplunk
Splunk Employee
Splunk Employee

This has been address in a couple of different threads, but try starting here:

http://splunk-base.splunk.com/answers/36/how-to-extract-fields-from-iis-default-log-file-format-w3c-...

0 Karma

eantonio
Path Finder

I'm also planning to install UF to my DMZ Servers and I need to monitor who is accessing my DMZ Servers from internal/external source. What would be the best Search Command to execute in Splunk Web Interface?

0 Karma

eantonio
Path Finder

Can you tell me what search value I need to execute in order to tell who is accessing my Web Server?

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...