IIS Logging

Check Description

This check determines whether Internet Information Services (IIS) logging is enabled, and if the W3C Extended Log File Format is used.

IIS logging goes beyond the scope of the event logging or performance monitoring features of Windows. The logs can include information, such as who has visited your site, what the visitor viewed, and when the information was viewed last. You can monitor attempts, either successful or unsuccessful, to access your Web sites, virtual folders, or files. This includes events such as reading the file or writing to the file. You can choose which events you want to audit for any site, virtual folder, or file. By regularly reviewing these files, you can detect areas of your server or your sites that may be subject to attacks or other security problems. You can enable logging for individual Web sites and choose the log format. When logging is enabled, it is enabled for all the site's folders, but you can disable it for specific directories.

Additional Information

HOW TO: Enable IIS Logging Site Activity (300390)