Use this tab to customize W3C Extended logging by choosing the fields (items) to be recorded in the log. Where appropriate, the abbreviated field name appears after the proper name. To limit log size, omit unneeded fields.

Date

Select to record the date the activity occurred.

Time

Select to record the time the activity occurred.

Extended Properties

Client IP Address

Select to record the IP address of the client that accessed your server.

User Name

Select to record the name of the authenticated user who accessed your server. This does not include anonymous users, who are represented by a hyphen (-).

Service Name

Select to record the Internet service and instance number that was accessed by a client.

Server Name

Select to record the name of the server on which the log entry was generated.

Server IP

Select to record the IP address of the server on which the log entry was generated.

Server Port

Select to record the port number the client is connected to.

Method

Select to record the action the client was trying to perform (for example, a GET command).

URI Stem

Select to record the resource accessed (for example, an HTML page, a CGI program, or a script).

URI Query

Select to record the query, if any, the client was trying to perform; that is, one or more search strings for which the client was seeking a match.

Protocol Status

Select to record the status of the action, in HTTP or FTP terms.

Protocol Substatus

Select to record additional status of the action, in HTTP terms. For more information about the Protocol Substatus property, see the IIS 6.0 online documentation on the Microsoft Windows Server TechCenter.

Win32 Status

Select to record the status of the action, in terms used by the Microsoft® Windows® operating system.

Bytes Sent

Select to record the number of bytes sent by the server.

Bytes Received

Select to record the number of bytes received by the server.

Time Taken

Select to record the length of time the action took to complete. For all log formats except ODBC logging, Time Taken is logged in milliseconds, according to the following technical breakdown: The client-request timestamp is initialized when HTTP.sys (the kernel-mode driver) receives the first byte (before HTTP.sys begins parsing the request). The client-request timestamp is stopped when the send completion occurs (for the last send) in IIS. Time Taken does not reflect time across the network. Also note, the first request to the site shows a slightly longer time taken than other similar/same requests because HTTP.sys opens the log file with the first request.

Protocol Version

Select to record the protocol (HTTP, FTP) version used by the client. For HTTP, this is either HTTP 1.0 or HTTP 1.1.

Host

Select to record the content of the host header.

User Agent

Select to record the browser used on the client.

Cookie

Select to record the content of the cookie sent or received, if any.

Referrer

Select to record the previous site visited by the user. This site provided a link to the current site.

Related Topics