Tagged Questions

4
votes
1answer
681 views

IIS 7.5 logging, how do I include milliseconds in the time field?

Currently, my IIS log looks like this (using W3C logging): 2012-02-15 00:31:50 W3SVC1 ... Is there a way to include milliseconds, such as: 2012-02-15 00:31:50.123 W3SVC1 ...
1
vote
2answers
191 views

How do I count successful Domain User Authentication (Log Ins) with LogParser

I need to be able to count only successful authentication attemtps for our IIS based Web Portal. All users come from the same IP Address. Is there something specific in the w3c logs to look for in ...
2
votes
1answer
377 views

In an IIS Log what does “…” mean in a “cs(Cookie)” column?

I've checked MSDN, and the W3C format, but nothing seems to explain what causes IIS to output "..." in the "cs(Cookie)" column. My assumption is that the cookie is "too big", but I'd like to know for ...
1
vote
4answers
2k views

IIS7 rejecting POST requests with 400 error

I have a web application that is supposed to handle post requests from SAP. This has been working fine at other customers with win2k3 systems (IIS6) and win2k8 (IIS7) systems. However, on this ...
0
votes
2answers
1k views

Splunk: How Do I Extract Fields from W3C Extended Format

I'm trying to configure Splunk to properly parse the fields of the W3C log format. Now, I'm running into configuration confusion: where and how do I specify how to split up the log format? My ...