How to enable IIS logs on an IIS server

We recommend that you enable IIS logs on the IIS server in a yearly environment. You can create separate logs for each site or application. IIS records Microsoft Windows®The event log or performance monitoring function provided by the operating system records information beyond the information range.

IIS logs can record information such as who visited the site, what the visitor browsed, And the last visit time. IIS logs can be used to identify the most popular content, identify information bottlenecks, or be used as resources to assist in attack event investigation.

The IIS manager management unit can be used to configure the log file format, log plan, and the exact information to be recorded. To limit the log size, carefully plan the recorded information.

When IIS logs are enabled, IIS uses W3C extended log file format to create routine operation records and store them in the directory specified for the site in IIS manager.

To improve server performance, log files should be stored on strip or strip/image disk volumes other than system volumes.

In addition, you can use the complete global Naming Convention (UNC) path to write log files to the network for Remote sharing. Remote logs allow administrators to establish centralized log file storage and backup. However, writing log files over the network may negatively affect server performance.

IIS logs can be configured to use several other ASCII or open database connection (ODBC) file formats. ODBC logs allow IIS to store activity information in SQL databases. However, it should be noted that when ODBC logs are enabled, IIS will disable the kernel mode cache. Therefore, executing ODBC logs will reduce the overall performance of the server.