Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In our network there is an ISA (2000) webproxy. It forwards requests to various IIS servers further down. Each request results in a log entry on the ISA server and another log entry on the IIS server the request is forwarded to. How would you match up these log entries ?

share|improve this question

The only way you can match them is by corresponding URL, date and time, and in the IIS log the client IP will be that of your ISA server. The logs are independent of each other so there is no concept of automatic correlation, you'll have to analyze it.

There might be tools by now (it's been a little while since I've done ISA administration) that will help you automate that analysis but I will admit I don't know of any.

share|improve this answer
I thought as much : a job for LogParser. Thanks. – esjr Feb 15 '11 at 22:30
@esjr: LogParser, or I used to even import them into a SQL database. – squillman Feb 16 '11 at 12:45

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.