Topic Last Modified: 2007-05-16

World Wide Web Consortium (W3C) extended log file entries are the default log entries for Windows Server 2008 SMTP Server. Some SMTP log file entries differ from Web and FTP entries. Fields that require text values that do not apply to SMTP Server are represented by a hyphen (-) or a zero (0) in the log file. Fields requiring numeric values are represented by a zero (0) in the log file. In the following table, fields listed in bold text indicate default log file entries.

Field Log field Description

Date

date

Connection date

Time

time

Connection time

Client IP Address

c-ip

IP address of the client that accessed the server

Client domain name

cs-username

Client that accessed the server

Service Name

s-sitename

Internet Information Services (IIS) service

Server Name

s-computername

Server on which the log entry was generated

Server IP

s-ip

IP address of the server on which the log entry was generated

Method

cs-method

Simple Mail Transfer Protocol (SMTP) protocol command sent by the client

URI Stem

cs-uri-stem

Not applicable to Microsoft SMTP Service

URI Query

cs-uri-query

Varies for Microsoft SMTP Service; depends on the SMTP protocol command

HTTP Status

sc-status

SMTP protocol reply code

Win32 Status

sc-win32-status

Windows Server 2008 status or error code; 0 indicates success

Bytes Sent

sc-bytes

Bytes sent by the server

Bytes Received

cs-bytes

Bytes received by the server

Time Taken

time-taken

Length of time that the action took in milliseconds

Server Port

s-port

Not applicable to SMTP service

User Agent

cs(User-Agent)

Not applicable to SMTP service

Cookie

cs(Cookie)

Not applicable to SMTP service

Referrer

cs(Referrer)

Not applicable to SMTP service