Page 1 of 1

Just need a quick clarification

Posted: Mon Feb 11, 2019 10:09 am
by benhank
SO, here I am uncafinated and I am about to configure two IIS servers to send a specific log file to the NLS.
I read the the instructions and again UNcaffinated, I read:

Code: Select all

You will need to rename iis_log1 to the name of the file you desire to monitor. This must be unique.
and well, on both servers the file has the same name which is WEBsitelog.log.
I am UNcafinatedly assuming that on both servers I can change iis_log1 to say WEBsitelog.log on server one and W3SVC2 on server two?
Or, can I just rename the iis_log1 to W3SVC1on both servers?

in otherwords if I added the following on both servers would NLS have a problem?

Code: Select all

# Watch your IIS log files
<Input iis_log1>
    Module   im_file
    File     'C:\inetpub\logs\LogFiles\W3SVC2\WEBsitelog.log'
    SavePos  TRUE
    Exec     $Message = $raw_event;
</Input>


<Route 1>
    Path internal, eventlog, WEBsitelog => out
</Route>

Re: Just need a quick clarification

Posted: Mon Feb 11, 2019 10:55 am
by scottwilkerson
Basically, you need to look in C:\inetpub\logs\LogFiles\ and see what the directories and files are called, then you can add the appropriate path to the File directive.

Also, see how the input has a name of iis_log1

Code: Select all

<Input iis_log1>
This needs to be added to the Route command, such as

Code: Select all

<Route 1>
    Path internal, eventlog, iis_log1 => out
</Route>
Now, get some coffee before making any changes

Re: Just need a quick clarification

Posted: Mon Feb 11, 2019 11:05 am
by benhank
ah i see
last question
Can the config files be identical on two separate servers?

Re: Just need a quick clarification

Posted: Mon Feb 11, 2019 11:34 am
by scottwilkerson
benhank wrote:Can the config files be identical on two separate servers?
Yes.

Re: Just need a quick clarification

Posted: Mon Feb 11, 2019 11:36 am
by benhank
Thanks you can lock it up

Re: Just need a quick clarification

Posted: Mon Feb 11, 2019 11:54 am
by scottwilkerson
benhank wrote:Thanks you can lock it up
Locking thread