Microsoft-Windows-IIS-Logging

2 events across 2 channels

Event ID 6200 —

Provider
Microsoft-Windows-IIS-Logging
Channel
Operational

Fields

NameDescription
EnabledFieldsFlags
date
time
cip
csusername
ssitename
scomputername
sip
csmethod
csuristem
csuriquery
scstatus
scwin32status
scbytes
csbytes
timetaken
sport
csUserAgent
csCookie
csReferer
csversion
cshost
scsubstatus
CustomFields

Event ID 6200 — date %2 time %3 s-sitename %6 s-computername %7 s-ip %8 cs-method %9 cs-uri-stem %10 cs-uri-query %11 s-port %17 cs-username %5 c-ip %4 cs-version ...

Provider
Microsoft-Windows-IIS-Logging
Channel
Logs

Message

date %2 time %3 s-sitename %6 s-computername %7 s-ip %8 cs-method %9 cs-uri-stem %10 cs-uri-query %11 s-port %17 cs-username %5 c-ip %4 cs-version %21 cs(User-Agent) %18 cs(Cookie) %19 cs(Referer) %20 cs-host %22 sc-status %12 sc-substatus %23 sc-win32-status %13 sc-bytes %14 cs-bytes %15 time-taken %16 %24

Fields

NameDescription
EnabledFieldsFlags
date
time
cip
csusername
ssitename
scomputername
sip
csmethod
csuristem
csuriquery
scstatus
scwin32status
scbytes
csbytes
timetaken
sport
csUserAgent
csCookie
csReferer
csversion
cshost
scsubstatus
CustomFields