IIS 6.0 F1: Logging Properties - Advanced Tab
Applies To: Windows Server 2008 R2
Use this tab to customize W3C Extended logging by choosing the fields (items) to be recorded in the log. Where appropriate, the abbreviated field name appears after the proper name. To limit log size, omit unneeded fields.
Select to record the date the activity occurred.
Select to record the time the activity occurred.
Client IP Address
Select to record the IP address of the client that accessed your server.
Select to record the name of the authenticated user who accessed your server. This does not include anonymous users, who are represented by a hyphen (-).
Select to record the Internet service and instance number that was accessed by a client.
Select to record the name of the server on which the log entry was generated.
Select to record the IP address of the server on which the log entry was generated.
Select to record the port number the client is connected to.
Select to record the action the client was trying to perform (for example, a GET command).
Select to record the resource accessed (for example, an HTML page, a CGI program, or a script).
Select to record the query, if any, the client was trying to perform; that is, one or more search strings for which the client was seeking a match.
Select to record the status of the action, in HTTP or FTP terms.
Select to record additional status of the action, in HTTP terms. For more information about the Protocol Substatus property, see the IIS 6.0 online documentation on the Microsoft Windows Server TechCenter.
Select to record the status of the action, in terms used by the Microsoft® Windows® operating system.
Select to record the number of bytes sent by the server.
Select to record the number of bytes received by the server.
Select to record the length of time the action took to complete. For all log formats except ODBC logging, Time Taken is logged in milliseconds, according to the following technical breakdown: The client-request timestamp is initialized when HTTP.sys (the kernel-mode driver) receives the first byte (before HTTP.sys begins parsing the request). The client-request timestamp is stopped when the send completion occurs (for the last send) in IIS. Time Taken does not reflect time across the network. Also note, the first request to the site shows a slightly longer time taken than other similar/same requests because HTTP.sys opens the log file with the first request.
Select to record the protocol (HTTP, FTP) version used by the client. For HTTP, this is either HTTP 1.0 or HTTP 1.1.
Select to record the content of the host header.
Select to record the browser used on the client.
Select to record the content of the cookie sent or received, if any.
Select to record the previous site visited by the user. This site provided a link to the current site.
To learn more about W3C Extended logging and logging site activity, see the IIS 6.0 online documentation on the Microsoft Windows Server TechCenter.