|
Home > Archive > IIS Server > December 2004 > Is custom logging possible with IIS 6.0 ?
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Is custom logging possible with IIS 6.0 ?
|
|
| Rob Hindman 2004-03-30, 8:35 pm |
| Hi InetServer.IIS,
I'm writing an ISAPI filter that needs to write information to the IIS
6.0 log using the W3C Extended Log File format.
From the documentation on MSDN, it looks like I need to use the
ILogPlugin or ILogPluginEx interface:
http://msdn.microsoft.com/library/d...ggingmodule.asp
Does anyone know if this example still works in IIS 6.0, or if there
is a better way of achieving these results?
Many Thanks for Your Help!
-Rob.
| |
| WenJun Zhang[msft] 2004-03-31, 4:34 am |
| Hi Rob,
The custom IIS logging module isn't an ISAPI filter. It's a dll can
be registered in IIS metabase. Why the default W3C Extended Log
Format in IIS6 doesn't work for you? Is it because you have a log
parser/analysis application uses different column order?
Best regards,
WenJun Zhang
Microsoft Online Support
This posting is provided "AS IS" with no warranties, and confers no
rights.
Get Secure! - www.microsoft.com/security
| |
| Rob Hindman 2004-03-31, 12:41 pm |
| Hi WenJun,
Thanks for your note, but I what I was meaning to ask was: "Are there
any other IIS 6.0 custom logging examples besides the one that I
found?"
I am aware that custom logging is not an ISAPI filter.
I am writing an ISAPI filter, and I want to write to the IIS 6.0 log
in W3C Extended Log Format.
Also, I was hoping to discover if there are any restrictions or
contraints when it comes to custom logging in IIS 6.0.
Many Thanks!
-Rob.
> Hi Rob,
>
> The custom IIS logging module isn't an ISAPI filter. It's a dll can
> be registered in IIS metabase. Why the default W3C Extended Log
> Format in IIS6 doesn't work for you? Is it because you have a log
> parser/analysis application uses different column order?
>
> Best regards,
>
> WenJun Zhang
> Microsoft Online Support
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> Get Secure! - www.microsoft.com/security
| |
| WenJun Zhang[msft] 2004-04-01, 4:39 am |
| Hi Rob,
As I know, there isn't additional sample of this from Microsoft.
Probably I still hasn't caught your scenario... :-)
In CHttpFilter::OnLog method, we can only modify the HTTP_FILTER_LOG
structure but not really write anything:
http://msdn.microsoft.com/library/d...ary/en-us/vcmfc
98/html/_mfc_chttpfilter.3a3a.onlog.asp
Do you mean you also need to develop a custom logging module to
process the IInetLogInformation object passed from IIS?
http://msdn.microsoft.com/library/d...ary/en-us/iissd
k/iis/ref_log_iili.asp
Best regards,
WenJun Zhang
Microsoft Online Support
This posting is provided "AS IS" with no warranties, and confers no
rights.
Get Secure! - www.microsoft.com/security
| |
| WenJun Zhang[msft] 2004-04-05, 2:36 am |
| Hi Rob,
There isn't any response from you from the last weekend. I just
wonder if you still need assistance on this issue. If so, please
don't hesitate to let me know. Thanks.
Best regards,
WenJun Zhang
Microsoft Online Support
This posting is provided "AS IS" with no warranties, and confers no
rights.
Get Secure! - www.microsoft.com/security
| |
| WenJun Zhang[msft] 2004-04-08, 8:42 am |
| Hi Rob,
As you know, IIS has the feature to cache/queue log records if
current log file isn't available to be written. Obviously ISAPI isn't
designed to involve this. Therefore I'm afraid writing IIS log
through ISAPI isn't a recommended way.
I'll help you to confirm if the custom logging module still works
with IIS6.
Best regards,
WenJun Zhang
Microsoft Online Support
This posting is provided "AS IS" with no warranties, and confers no
rights.
Get Secure! - www.microsoft.com/security
| |
| Rob Hindman 2004-04-11, 3:34 pm |
| Hi WenJun,
Thanks for all of your help! I currently have an approach that is
working well for me. I am trapping the SF_NOTIFY_LOG notification in
my ISAPI filter, and modifying the HTTP_FILTER_LOG data structure.
Thus, I am not writing to the IIS log directly, but letting IIS log
the modified data in the data structure.
My tests indicate that this approach works well... Can you check for
me if this technique is permitted or not recommended?
Many Thanks, WenJun!
-Rob.
> Hi Rob,
>
> As you know, IIS has the feature to cache/queue log records if
> current log file isn't available to be written. Obviously ISAPI isn't
> designed to involve this. Therefore I'm afraid writing IIS log
> through ISAPI isn't a recommended way.
>
> I'll help you to confirm if the custom logging module still works
> with IIS6.
>
> Best regards,
>
> WenJun Zhang
> Microsoft Online Support
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> Get Secure! - www.microsoft.com/security
| |
| WenJun Zhang[msft] 2004-04-11, 3:34 pm |
| Surely it's the decent and most recommended way. :-)
Best regards,
WenJun Zhang
Microsoft Online Support
This posting is provided "AS IS" with no warranties, and confers no
rights.
Get Secure! - www.microsoft.com/security
| |
| bes7252 2004-12-28, 11:56 pm |
| WenJun,
I came across this message:
>> The custom IIS logging module isn't an ISAPI filter. It's a dll can
be registered in IIS metabase. Why the default W3C Extended Log
Format in IIS6 doesn't work for you? Is it because you have a log
parser/analysis application uses different column order?
I'm using software that requires the IIS6 W3C log to be in the same order as IIS5. Is there a way to change this?
thanks.
Brian | |
| Kristofer Gafvert 2004-12-29, 7:55 am |
| Hello Brian!
I'm sorry, but there is no way to change the order. Perhaps your
software has an update so it is compatible with IIS 6.0.
A log analyser should read the header fields to figure out in what
order the fields are.
As far as i know, the Fields header is supposed to specify in which
order fields are recorded, and there is no "standard order" to follow,
so this may very between webservers and in this case even versions of a
webserver.
--
Regards,
Kristofer Gafvert
www.ilopia.com
bes7252 wrote:
>
> WenJun,
>
> I came across this message:
>
> be registered in IIS metabase. Why the default W3C Extended Log
> Format in IIS6 doesn't work for you? Is it because you have a log
> parser/analysis application uses different column order?
>
> I'm using software that requires the IIS6 W3C log to be in the same
> order as IIS5. Is there a way to change this?
>
> thanks.
> Brian
>
>
>
> --
> bes7252
> ----------------------------------------------------------------------
> -- Posted via http://www.webservertalk.com
> ----------------------------------------------------------------------
> -- View this thread: http://www.webservertalk.com/message167471.html
>
| |
| David Wang [Msft] 2004-12-29, 5:57 pm |
| The order of the W3C log is defined by the commented headers in front of the
entries. IIS5 wrote in one order, IIS6 wrote in another. Both are valid in
accordance to W3C specification.
In other words, your software has a bug in that it does not follow W3C
specifications, so it only works on IIS5. You should report this error to
the provider of that software.
You could try LogParser to read in and re-order the columns for analysis.
http://www.microsoft.com/downloads/...&DisplayLang=en
http://www.logparser.com
--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"bes7252" <bes7252.1i0pd0@mail.webservertalk.com> wrote in message
news:bes7252.1i0pd0@mail.webservertalk.com...
WenJun,
I came across this message:
[vbcol=seagreen]
be registered in IIS metabase. Why the default W3C Extended Log
Format in IIS6 doesn't work for you? Is it because you have a log
parser/analysis application uses different column order?
I'm using software that requires the IIS6 W3C log to be in the same
order as IIS5. Is there a way to change this?
thanks.
Brian
--
bes7252
------------------------------------------------------------------------
Posted via http://www.webservertalk.com
------------------------------------------------------------------------
View this thread: http://www.webservertalk.com/message167471.html
|
|
|
|
|