To monitor IIS Logs from remote Server

[chimbudp]

Need to monitor IIS Logs of remote windows Servers
I am using universal forwarders to bring data into Splunk

• Please help in creating inputs.conf

[jbsplunk · Accepted solution]

Should be pretty simple to do this, something like this would work:

[monitor://c:\myiisfolder\]
disabled = false
followTail = 0
sourcetype=iis

The thing is, you need to be able to get those logs accessible via some kind of file sharing. So long as permissions are okay, this won't pose any issue for you.