Skip to main content
Skip table of contents

Flat File - Microsoft IIS W3C File

Device Details

Device NameMicrosoft IIS W3C File
VendorMicrosoft
Device TypeIIS W3C File
Supported Model Name/NumberN/A
Supported Software VersionN/A
Collection MethodFlat File
Configurable Log OutputN/A
Log Source TypeFlat File - Microsoft IIS W3C File
Log Processing PolicyLogRhythm Default V 2.0
ExceptionsN/A
Additional Informationhttps://learn.microsoft.com/en-us/windows/win32/http/w3c-logging
The log format should be followed

date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken

All fields of the IIS log source must be checked for correct parsing.

Supported Log Messages

(List of LR tags used to parse the log information for each message type)

TypeProduct VersionSupported Schema Fields
V 2.0 : IIS W3C EventsN/A<process>, <dname>, <dip>, <tag1>, <command>, <url>, <object>, <dport>, <login>, <sip>, <version>, <useragent>, <tag2>, <responsecode>, <bytesin>, <bytesout>, <milliseconds>
V 2.0 : Catch All : Level 1N/AN/A

Revision History

KB VersionLog TypeChange TypeDetails
KB 7.1.665.0Flat File - Microsoft IIS W3C FileNew Log Source Optimization (LSO) policy: LogRhythm Default v2.0Optimized new log processing policy for Flat File - Microsoft IIS W3C File
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.