Re: IIS Logging

[Christian Frichot <xntrik () gmail com>]

I second both Splunk and LogParser, both good, probably for different reasons.

Cheers,

Christian Frichot
e: xntrik () gmail com
t: @xntrik
w: http://un-excogitate.org

On Fri, May 20, 2011 at 7:47 AM, Scott Kragen <skragen () gmail com> wrote:
> If your looking pure analysis microsoft actually wrote a great tool called
> logparser.  I have actually used in the past for few projects.  Its allows
> one to do sql statements against most log files (it was designed originally
> for IIS).
>
> http://www.microsoft.com/downloads/en/details.aspx?familyid=890cd06b-abf8-4c25-91b2-f8d975cf8c07&displaylang=en
>
> Worth checking out and playing with.
>
> Scott
>
> On Thu, May 19, 2011 at 2:56 PM, Russell Eubanks
> <securityeverafter () gmail com> wrote:
> > Splunk does a good job with IIS logs.
> >
> > On May 19, 2011, at 2:48 PM, Michael Lubinski <michael.lubinski () gmail com>
> > wrote:
> >
> > > Do any of you have any good sources for pulling valuable data out of IIS
> > > logs? SBS servers included.
> > > _______________________________________________
> > > Pauldotcom mailing list
> > > Pauldotcom () mail pauldotcom com
> > > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > Main Web Site: http://pauldotcom.com
> > _______________________________________________
> > Pauldotcom mailing list
> > Pauldotcom () mail pauldotcom com
> > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > Main Web Site: http://pauldotcom.com
>
>
>
> --
> ----------------------------------------------------------------------------------------------------------------------
> There is only one metric in security that can be truly measured and that is
> failure!
>
> --- Jack Daniels
> ----------------------------------------------------------------------------------------------------------------------
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom () mail pauldotcom com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com