dcsimg

Sample Log File – Microsoft IIS 4.0 and 5.0 Extended Log File

Products

Webtrends On Premises 9.x
Webtrends On Premises 8.x

Cause

An example of the Microsoft IIS 4.0 and 5.0 extended log file format is shown below.

#Fields: date time c-ip cs-username s-computername s-ip cs-method cs-uri-stem cs-uri-query sc-status sc-bytes cs-bytes time-taken cs-version cs(User-Agent) cs(Cookie) cs(Referer)
1996-01-01 10:48:02 195.52.225.44 – WEB1 192.166.0.24 GET /default.htm – 200 1703 279 0 HTTP/1.0 Mozilla/4.0+[en]+(WinNT;+I) – http://www.webtrends.com/def_f1.htm
1996-01-01 10:48:02 195.52.225.44 – WEB1 192.166.0.24 GET /loganalyzer/info.htm – 200 3960 303 0 HTTP/1.0 Mozilla/4.0+[en]+(WinNT;+I) WEBTRENDS_ID=195.52.225.44-100386000.29188902 http://www.webtrends.com/def_f1.htm
1996-01-01 10:48:05 195.52.225.44 – WEB1 192.166.0.24 GET /styles/style1.css – 200 586 249 0 HTTP/1.0 Mozilla/4.0+[en]+(WinNT;+I) WEBTRENDS_ID=195.52.225.44-100386000.29188902 –
1996-01-01 10:48:05 195.52.225.44 – WEB1 192.166.0.24 GET /graphics/atremote/remote.jpg – 200 12367 301 656 HTTP/1.0 Mozilla/4.0+[en]+(WinNT;+I) WEBTRENDS_ID=195.52.225.44-100386000.29188902 http://webtrends.sample.com/wt_f2.htm
1996-01-01 10:48:05 195.52.225.44 – WEB1 192.166.0.24 GET /graphics/backg/backg1.gif – 200 448 313 0 HTTP/1.0 Mozilla/4.0+[en]+(WinNT;+I) WEBTRENDS_ID=195.52.225.44-100386000.29188902 http://webtrends.sample.com/loganalyzer/info.htm

Note: The #-field directive defines how the log file is formatted. IIS 4.0 and 5.0 will place a new header every time the web service is restarted. Webtrends Log Analyzer versions prior to v4.2, Professional Suite versons prior to v2.1, and Enterprise versions prior to v2.1 will not tolerate these duplicate headers.

With newer versions, log files are considered invalid only when these headers specify two different sets of fields within the same log file.

Description of Fields:
Field 1: Date
Field 2: Time
Field 3: Client IP
Field 4: Authenticated Username
Field 5: Server Name
Field 6: Server IP
Field 7: Method
Field 8: Target Resource
Field 9: Query String
Field 10: Status/Return Code
Field 11: Server-to-client Bytes
Field 12: Client-to-server Bytes
Field 13: Transfer Time
Field 14: Protocol version
Field 15: User Agent
Field 16: Cookie
Field 17: Referrer