# Copyright (c) 2013 Flowerfire, Inc. All Rights Reserved. iis_advanced_logging_module = { plugin_version = "1.0" info.1.manufacturer = "Microsoft" info.1.device = "IIS Advanced Logging Module" info.1.version = "1.0" # 2013-01-16 - 1.0 - GMF - Initial implementation--based on iisweb # The name of the log format log.format.format_label = "IIS Advanced Logging Module Log Format" log.miscellaneous.log_data_type = "generic_w3c" log.miscellaneous.log_format_type = "web_server" # The log is in this format if any of the first ten lines match this regular expression log.format.autodetect_regular_expression = "^#Software: IIS Advanced Logging Module" # Don't track these fields as discrete database fields. Don't add sc_bytes as a database field here, because it will be added by the web_server_package snapon. auto_setup.omit_database_fields = "cs_uri_query,cs_cookie,sc_bytes,cs_bytes" log.parsing_filters.remove_time_milliseconds = ` if (matches_regular_expression(time, '^([0-9:]+)[.]')) then time = $1; ` # Log Filters log.filters = { empty_uri_query = { label = "$lang_admin.log_filters.empty_uri_query_label" comment = "$lang_admin.log_filters.empty_uri_query_comment" value = "if (cs_uri_query eq '-') then cs_uri_query = '(empty)';" disabled = true requires_fields = { cs_uri_query = true } } # empty_uri_query add_cs_uri_query = { label = "$lang_admin.log_filters.add_cs_uri_query_label" comment = "$lang_admin.log_filters.add_cs_uri_query_comment" value = "cs_uri_stem = cs_uri_stem . '?' . cs_uri_query" disabled = true requires_fields = { cs_uri_query = true cs_uri_stem = true } } # add_cs_uri_query } # log.filters database.numerical_fields = { time_taken = { type = "int" integer_bits = 64 display_format_type = duration_milliseconds } # time_taken # time_taken_avg = { # label = "$lang_stats.field_labels.average $lang_stats.field_labels.time_taken" # default = false # log_field = "time_taken" # requires_log_field = true # type = "int" # integer_bits = 64 # aggregation_method = "average" # average_denominator_field = "hits" # display_format_type = duration_milliseconds # } # time_taken } # database.numerical_fields create_profile_wizard_options = { # How the reports should be grouped in the report menu report_groups = { date_time_group = "" content_group = { cs_uri_stem = true cs_uri_query = true } visitor_demographics_group = { c_ip = true cs_username = true } referrer_group = { referrer = true } server_group = { s_sitename = true s_computername = true s_ip = true s_port = true cs_host = true } other_group = { cs_version = true # spider = true cs_method = true sc_status = true sc_substatus = true sc_win32_status = true cs_cookie = true } } # report_groups # This plug-in does its derived fields manually--don't automatically create operating_system, web_browser, etc. manual_derived_fields = true snapons = { # Attach a web_server_package snapon web_server_package = { snapon = "web_server_package" name = "web_server_package" label = "$lang_admin.snapons.web_server_package.label" parameters = { user_agent_field.parameter_value = "cs_user_agent" page_field.parameter_value = "cs_uri_stem" client_ip_field.parameter_value = "c_ip" server_response_field.parameter_value = "sc_status" referrer_field.parameter_value = "referrer" authenticated_user_field.parameter_value = "cs_username" hits_field = { parameter_value = "$lang_stats.field_labels.hits" final_node_name = "hits" } # hits visitors_field = { parameter_value = "$lang_stats.field_labels.unique_client_ips" final_node_name = "unique_client_ips" } # visitors_field sc_bytes_field = { parameter_value = "$lang_stats.field_labels.sc_bytes" final_node_name = "sc_bytes" } # sc_bytes_field cs_bytes_field = { parameter_value = "$lang_stats.field_labels.cs_bytes" final_node_name = "cs_bytes" } # cs_bytes_field } # parameters } # web_server_package } # snapons } # create_profile_wizard_options } # iis_advanced_logging_module