Getting Data In

iis log missing time_taken field

abrarfakhri
Path Finder

We have multiple version of IIS but looks like an older version is missing the last field (time_taken). We still need to determine time_taken in order to monitor the slowness of the web server etc.
I was thinking of using the GET and POST methods with a combination of transaction to calculate it.

Any ideas?

Tags (3)
0 Karma
1 Solution

abrarfakhri
Path Finder

We figured it out. The variable time-taken was not being set in the configurations of the IIS sites. We will get it switch ON to begin collecting the info.

View solution in original post

0 Karma

abrarfakhri
Path Finder

We figured it out. The variable time-taken was not being set in the configurations of the IIS sites. We will get it switch ON to begin collecting the info.

0 Karma

musskopf
Builder

What's your IIS version? Have you try to install the "MS Advanced Logging Module"? http://www.iis.net/downloads/microsoft/advanced-logging

0 Karma
Get Updates on the Splunk Community!

Simplifying the Analyst Experience with Finding-based Detections

    Splunk invites you to an engaging Tech Talk focused on streamlining security operations with ...

[Puzzles] Solve, Learn, Repeat: Word Search

This challenge was first posted on Slack #puzzles channelThis puzzle is based on a letter grid containing ...

[Puzzles] Solve, Learn, Repeat: Advent of Code - Day 4

Advent of CodeIn order to participate in these challenges, you will need to register with the Advent of Code ...