Article ID: 313437 - View products that this article applies to.
We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 7.0 running on Microsoft Windows Server 2008. IIS 7.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:
http://www.microsoft.com/technet/security/prodtech/IIS.mspxFor more information about IIS 7.0, visit the following Microsoft Web site:
This step-by-step article describes how to enable logging for Web sites or for FTP sites in Microsoft Internet Information Services (IIS) 6.0, in IIS 5.0, and in IIS 4.0. You can configure your Web site or your FTP site to record log entries that are generated from user activity and from server activity. Log data can help you control access to content, determine content popularity, plan security requirements, and troubleshoot potential Web site issues or FTP site issues. For example, you can use the log files to help determine whether a security event has occurred. The data in the log files can provide information about the source of the attack.
IIS can save log files to different file formats. When you enable logging, you can specify the file format that you want to use. By default, IIS uses the W3C Extended log file format. Typically, the W3C Extended log file format is the preferred log type to use. This log format lets you configure lots of extended attributes that are useful to help analyze security.
Customize the dataYou can customize the data that is logged to log files that use the W3C Extended log file format. To customize the data, select the properties that you want and omit the properties that you do not want. You may want to select the following properties when you customize W3C Extended log file format logs:
Enable and configure logging in Internet Information Services (IIS)To enable and to configure logging for a Web site or for an FTP site in IIS, follow these steps:
For additional information about how to configure logging in IIS 6.0, see the "Logging Site Activity" topic in the IIS 6.0 documentation. To view the IIS 6.0 documentation, visit the following Microsoft Web site:
http://technet2.microsoft.com/windowsserver/en/technologies/featured/iis/default.mspxFor additional information about the W3C Extended log file format, see the W3C Working Draft WD-logfile-960323 specification. To do this, visit the following World Wide Web Consortium (W3C) Web site:
http://www.w3.org/TR/WD-logfileFor additional information about logging in IIS 6.0, click the following article numbers to view the articles in the Microsoft Knowledge Base:
(https://support.microsoft.com/kb/814870/ )IIS 6.0 log management documentation
324279For additional information about how to configure logging in IIS 5.0, see the "Logging Site Activity" topic in the "Server Administration" section in the "Administration" chapter of the IIS 5.0 documentation. To view the IIS 5.0 documentation, visit the following Microsoft Web site:
(https://support.microsoft.com/kb/324279/ )How to configure Web site logging in Windows Server 2003
http://technet.microsoft.com/en-us/library/bb742601.aspxFor additional information about logging in IIS 5.0, click the following article numbers to view the articles in the Microsoft Knowledge Base:
(https://support.microsoft.com/kb/300390/ )How to enable IIS logging site activity in Windows 2000
(https://support.microsoft.com/kb/324091/ )How to view and report from log files
245243Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
(https://support.microsoft.com/kb/245243/ )How to configure ODBC logging in IIS
Article ID: 313437 - Last Review: March 31, 2015 - Revision: 7.0