2
votes
1answer
35 views

IIS W3C Log (Abnormally?)

Three of our intranet IIS servers are behind F5 Load Balancer. I grabbed the W3c log from one of the servers for a typical day, and there turned out to be about 100k entries. What I feel uneasy is ...
0
votes
1answer
93 views

TO_TIMESTAMP(date, time) missing seconds?

When I run log parser using the code below I get the data and time field together as expected but it is missing the seconds. How do you get it to also list the seconds? The two fields look like, ...
4
votes
1answer
1k views

IIS 7.5 logging, how do I include milliseconds in the time field?

Currently, my IIS log looks like this (using W3C logging): 2012-02-15 00:31:50 W3SVC1 ... Is there a way to include milliseconds, such as: 2012-02-15 00:31:50.123 W3SVC1 ...
0
votes
2answers
2k views

Splunk: How Do I Extract Fields from W3C Extended Format

I'm trying to configure Splunk to properly parse the fields of the W3C log format. Now, I'm running into configuration confusion: where and how do I specify how to split up the log format? My ...