IIS 7 log file time does not match server time

Recently in the analysis of web logs, it was found that the time in the IIS7 log was inconsistent with the system time, that is, when it was time to work

The production of concurrent access logs, all occurred in the wee hours before work.

650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M01/8C/F1/wKioL1h_N-6AVV6sAAA99reFjDc297.png-wh_500x0-wm_3 -wmp_4-s_531519730.png "title=" Qq20170118173936.png "alt=" Wkiol1h_n-6avv6saaa99refjdc297.png-wh_50 "/>

This thought is the system time set error, after checking everything is OK. After querying the information, it turned out to be this reason:

The format of the log is IIS, NCSA, three kinds of:

1.IIS is a fixed ASCII text-based format that cannot customize the fields of a record, and the fields are separated by commas.

The time recorded is the local time file name prefix of u_in.

The 2.NCSA is the National Center for Supercomputing Applications (NCSA) Common log file format, which is also a fixed base

In the format of ASCII text, the fields of the record cannot be customized, fields are separated by spaces, and the time recorded is local

and marks the deviation from UTC time, with a filename prefix of U_NC.

3.W3C is a customizable ASCII text-based format that allows you to specify a field for a record, a field

Separated by spaces, the recorded time is in UTC format and the filename prefix is u_ex.

IIS7 default format for the user, it can provide the most complete information, NCSA is the most concise. So as

NCSA format, each visit will be recorded immediately, and the format will require a certain processing time,

In about two minutes, you can see the latest access history in the log, and the IIS format is in between.

UTC time is also called coordinated World, is based on GMT, other places to add the time zone, China

In the East eight area, add eight hours to the UTC time.

The time format used is not customizable.

The default directory is%systemdrive%\inetpub\logs\logfiles, encoded as UTF-8.

Log file rollover is the time to set up log file creation, one per day, one per week, one per month,

One per hour, maximum file size (creates a new log file when the file reaches a certain size (in bytes), and

There are several options for creating a new log file.

"Use local time for file naming and rollover" means to create a log in local time

file, and the format of the logging time is determined by the format of the log, such as the selection of the "the" must be UTC time

。

This article is from the "11628832" blog, please be sure to keep this source http://11638832.blog.51cto.com/11628832/1892974

IIS 7 log file time does not match server time