Getting Data In

Enable Logging for IIS Fields

matthew-miller
Loves-to-Learn

Currently we have Microsoft IIS Web-Servers out in the environment, but the fields they are logging is spotty. Is there any way to enable logging for all available fields? 

We have a deployment server, would that be of help in this situation?

 

For context, I've included a list of some specific fields we're looking for below:

date, time, c-ip, cs-username, s-ip, s-port, cs-method, cs-uri-stem, etc.

Labels (4)
0 Karma

matthew-miller
Loves-to-Learn

Will the add-on allow me to change what data is coming in? I was under the impression that just parsed log files.

0 Karma

PickleRick
SplunkTrust
SplunkTrust

Did you see that particular page I pointed you to? There is a section on where and for what exactly you should look in Microsoft's documentation to configure IIS properly.

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...