From what little I know about PCI compliance I need to be logging all web site activity and keeping said logs online for at least 3 months. What I have not been able to get a straight answer on, however, is what fields or properties must be included from the Advanced tab in IIS Logging properties. Some seem obvious and need to be included (e.g. date,time,client IP) but others are not so obvious.
Here is this list of available fields (defaults in bold):
- Date
- Time
- Client IP Address
- User Name
- Service Name
- Server Name
- Server IP Address
- Server Port
- Method
- URI Stem
- URI Query
- Protocol Status
- Protocol Substatus
- Win32 Status
- Bytes Sent
- Bytes Received
- Time Taken
- Protocol Version
- Host
- User Agent
- Cookie
- Referer