Getting Data In

How do you extract fields from IIS logs?

Explorer

Good morning.

I have to set up my universal forwarder to capture IIS logs. The problem is the fields are not extracting fully. I am not sure what files to configure to extract them properly. Any help is appreciated.

thanks!

0 Karma
1 Solution

Communicator

@davidblizzard There is a TA out there on Splunk base https://splunkbase.splunk.com/app/3185/#/details which works pretty good.

View solution in original post

0 Karma

Communicator

@davidblizzard There is a TA out there on Splunk base https://splunkbase.splunk.com/app/3185/#/details which works pretty good.

View solution in original post

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes and swag!