Microsoft-Windows-IIS-Logging

2 events across 2 channels

Event ID 6200 — date date time time s-sitename ssitename s-computername scomputername s-ip sip cs-method csmethod cs-uri-stem csuristem cs-uri-query csuriquery s-port sport cs-username csusername c-ip cip cs-versi...

Provider
Microsoft-Windows-IIS-Logging
Channel
Logs

Message #

date %2 time %3 s-sitename %6 s-computername %7 s-ip %8 cs-method %9 cs-uri-stem %10 cs-uri-query %11 s-port %17 cs-username %5 c-ip %4 cs-version %21 cs(User-Agent) %18 cs(Cookie) %19 cs(Referer) %20 cs-host %22 sc-status %12 sc-substatus %23 sc-win32-status %13 sc-bytes %14 cs-bytes %15 time-taken %16 %24

Fields #

NameDescription
EnabledFieldsFlags UInt32
date UnicodeString
time UnicodeString
cip UnicodeString
csusername UnicodeString
ssitename UnicodeString
scomputername UnicodeString
sip UnicodeString
csmethod AnsiString
csuristem UnicodeString
csuriquery AnsiString
scstatus UInt16
scwin32status UInt32
scbytes UInt64
csbytes UInt64
timetaken UInt64
sport UInt16
csUserAgent AnsiString
csCookie AnsiString
csReferer AnsiString
csversion UnicodeString
cshost AnsiString
scsubstatus UInt16
CustomFields UnicodeString

Event ID 6200 —

Provider
Microsoft-Windows-IIS-Logging
Channel
Operational

Fields #

NameDescription
EnabledFieldsFlags UInt32
date UnicodeString
time UnicodeString
cip UnicodeString
csusername UnicodeString
ssitename UnicodeString
scomputername UnicodeString
sip UnicodeString
csmethod AnsiString
csuristem UnicodeString
csuriquery AnsiString
scstatus UInt16
scwin32status UInt32
scbytes UInt64
csbytes UInt64
timetaken UInt64
sport UInt16
csUserAgent AnsiString
csCookie AnsiString
csReferer AnsiString
csversion UnicodeString
cshost AnsiString
scsubstatus UInt16
CustomFields UnicodeString