Splunk IT Service Intelligence

splunk app for web analytics : sourcetype "ms:iis:auto" configuration instead of "iis"

New Member

Hi ,

Currently, all our webserver (iis server) log events are configured with sourcetype "ms:iis:auto" but default splunk web analytics app inbuilt sourcetype is "iis" . I have followed the app documentation but data is not fetching out while selecting generate users sessions option.

modified eventtype configurations:
web-traffic sourcetype="aws:cloudfront:accesslogs" OR sourcetype="apache:access" OR sourcetype="iis" OR sourcetype="ms:iis:auto" OR sourcetype="access_combined" OR sourcetype="access_common" OR sourcetype="access_combined_wcookie"

Is there any other configuration steps required for Splunk App for Web Analytics app work with "ms:iis:auto" sourcetype ?


0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!


Or Learn More in Our Blog >>