IIS logging to remote server

we run IIS 5.0, I would very much like to send all log files to a remote
server, but IIS doesn't allow changing to logging to a remote server, so I
got myself a copy of metaedit and changed it, it took the change but IIS is
unable to create the log folder regardless of all proper security in place,
event reports the following

Event Type: Error
Event Source: IISLOG
Event Category: None
Event ID: 2
Date: 2/13/2005
Time: 3:45:28 PM
User: N/A
Computer: IIS
Description:
IIS Logging was unable to create the directory \\server\share\W3SVC1. The
data is the error.
For additional information specific to this message please visit the
Microsoft Online Support site located at:
http://www.microsoft.com/contentredirect.asp.
Data:
0000: 7b 00 00 00 {...

Any possible workaround or do I need to upgrade to IIS 6.0, also can I
install IIS 6.0 as a separate component on my 2k box or do I have to upgrade
to 2k3

Thanks
Alexander Gilman Carv [ So, 13 Februar 2005 22:05 ] [ ID #641802 ]

Re: IIS logging to remote server

What do you mean "proper security is in place"?

AFAIK, IIS Logfiles are written by LocalSystem, and LocalSystem can not be
assigned permissions to remote resources (such as file shares...)

Cheers
Ken

"Joe" <me [at] me.com> wrote in message
news:u3YpB%23gEFHA.2876 [at] TK2MSFTNGP12.phx.gbl...
> we run IIS 5.0, I would very much like to send all log files to a remote
> server, but IIS doesn't allow changing to logging to a remote server, so I
> got myself a copy of metaedit and changed it, it took the change but IIS
> is unable to create the log folder regardless of all proper security in
> place, event reports the following
>
> Event Type: Error
> Event Source: IISLOG
> Event Category: None
> Event ID: 2
> Date: 2/13/2005
> Time: 3:45:28 PM
> User: N/A
> Computer: IIS
> Description:
> IIS Logging was unable to create the directory \\server\share\W3SVC1. The
> data is the error.
> For additional information specific to this message please visit the
> Microsoft Online Support site located at:
> http://www.microsoft.com/contentredirect.asp.
> Data:
> 0000: 7b 00 00 00 {...
>
> Any possible workaround or do I need to upgrade to IIS 6.0, also can I
> install IIS 6.0 as a separate component on my 2k box or do I have to
> upgrade to 2k3
>
> Thanks
>
>
>
>
Ken Schaefer [ Mo, 14 Februar 2005 03:35 ] [ ID #642226 ]

RE: IIS logging to remote server

You can send the IIS logs using Snare to a Syslog server.

Try this FREE tool:
http://www.intersectalliance.com/projects/SnareIIS/index.htm l

Here are some guides to do this:
http://www.precision-guesswork.com/sage-guide/device-config. html

The old school technology to do this:
http://www.kiwisyslog.com/


"Joe" wrote:

> we run IIS 5.0, I would very much like to send all log files to a remote
> server, but IIS doesn't allow changing to logging to a remote server, so I
> got myself a copy of metaedit and changed it, it took the change but IIS is
> unable to create the log folder regardless of all proper security in place,
> event reports the following
>
> Event Type: Error
> Event Source: IISLOG
> Event Category: None
> Event ID: 2
> Date: 2/13/2005
> Time: 3:45:28 PM
> User: N/A
> Computer: IIS
> Description:
> IIS Logging was unable to create the directory \\server\share\W3SVC1. The
> data is the error.
> For additional information specific to this message please visit the
> Microsoft Online Support site located at:
> http://www.microsoft.com/contentredirect.asp.
> Data:
> 0000: 7b 00 00 00 {...
>
> Any possible workaround or do I need to upgrade to IIS 6.0, also can I
> install IIS 6.0 as a separate component on my 2k box or do I have to upgrade
> to 2k3
>
> Thanks
>
>
>
>
>
PhilAgcaoili [ Mo, 14 Februar 2005 06:23 ] [ ID #642501 ]

Re: IIS logging to remote server

On Sun, 13 Feb 2005 16:05:45 -0500, "Joe" <me [at] me.com> wrote:

>we run IIS 5.0, I would very much like to send all log files to a remote
>server, but IIS doesn't allow changing to logging to a remote server, so I
>got myself a copy of metaedit and changed it, it took the change but IIS is
>unable to create the log folder regardless of all proper security in place,
>event reports the following
>
>Event Type: Error
>Event Source: IISLOG
>Event Category: None
>Event ID: 2
>Date: 2/13/2005
>Time: 3:45:28 PM
>User: N/A
>Computer: IIS
>Description:
>IIS Logging was unable to create the directory \\server\share\W3SVC1. The
>data is the error.
>For additional information specific to this message please visit the
>Microsoft Online Support site located at:
>http://www.microsoft.com/contentredirect.asp.
>Data:
>0000: 7b 00 00 00 {...
>
>Any possible workaround or do I need to upgrade to IIS 6.0, also can I
>install IIS 6.0 as a separate component on my 2k box or do I have to upgrade
>to 2k3

IIS will not log to a remote server. You can do ODBC logging, or use
a script to copy the log to a remote server after it rolls over, but
there is no way to force IIS to log to a remote server.

Jeff
jeff.nospam [ Di, 15 Februar 2005 05:37 ] [ ID #644301 ]

Re: IIS logging to remote server

you think this might help
http://support.microsoft.com/default.aspx?scid=kb;en-us;2896 55

and I guess when you say IIS will not log to a remote server you mean IIS
5.0


"Jeff Cochran" <jeff.nospam [at] zina.com> wrote in message
news:42187c4a.6633999 [at] msnews.microsoft.com...
> On Sun, 13 Feb 2005 16:05:45 -0500, "Joe" <me [at] me.com> wrote:
>
>>we run IIS 5.0, I would very much like to send all log files to a remote
>>server, but IIS doesn't allow changing to logging to a remote server, so I
>>got myself a copy of metaedit and changed it, it took the change but IIS
>>is
>>unable to create the log folder regardless of all proper security in
>>place,
>>event reports the following
>>
>>Event Type: Error
>>Event Source: IISLOG
>>Event Category: None
>>Event ID: 2
>>Date: 2/13/2005
>>Time: 3:45:28 PM
>>User: N/A
>>Computer: IIS
>>Description:
>>IIS Logging was unable to create the directory \\server\share\W3SVC1. The
>>data is the error.
>>For additional information specific to this message please visit the
>>Microsoft Online Support site located at:
>>http://www.microsoft.com/contentredirect.asp.
>>Data:
>>0000: 7b 00 00 00 {...
>>
>>Any possible workaround or do I need to upgrade to IIS 6.0, also can I
>>install IIS 6.0 as a separate component on my 2k box or do I have to
>>upgrade
>>to 2k3
>
> IIS will not log to a remote server. You can do ODBC logging, or use
> a script to copy the log to a remote server after it rolls over, but
> there is no way to force IIS to log to a remote server.
>
> Jeff
Alexander Gilman Carv [ Di, 15 Februar 2005 06:05 ] [ ID #644302 ]

Re: IIS logging to remote server

remote share logging only supported in IIS6.0

--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/



"Joe" <me [at] me.com> wrote in message
news:uAr%23juxEFHA.3368 [at] TK2MSFTNGP10.phx.gbl...
> you think this might help
> http://support.microsoft.com/default.aspx?scid=kb;en-us;2896 55
>
> and I guess when you say IIS will not log to a remote server you mean IIS
> 5.0
>
>
> "Jeff Cochran" <jeff.nospam [at] zina.com> wrote in message
> news:42187c4a.6633999 [at] msnews.microsoft.com...
>> On Sun, 13 Feb 2005 16:05:45 -0500, "Joe" <me [at] me.com> wrote:
>>
>>>we run IIS 5.0, I would very much like to send all log files to a remote
>>>server, but IIS doesn't allow changing to logging to a remote server, so
>>>I
>>>got myself a copy of metaedit and changed it, it took the change but IIS
>>>is
>>>unable to create the log folder regardless of all proper security in
>>>place,
>>>event reports the following
>>>
>>>Event Type: Error
>>>Event Source: IISLOG
>>>Event Category: None
>>>Event ID: 2
>>>Date: 2/13/2005
>>>Time: 3:45:28 PM
>>>User: N/A
>>>Computer: IIS
>>>Description:
>>>IIS Logging was unable to create the directory \\server\share\W3SVC1.
>>>The
>>>data is the error.
>>>For additional information specific to this message please visit the
>>>Microsoft Online Support site located at:
>>>http://www.microsoft.com/contentredirect.asp.
>>>Data:
>>>0000: 7b 00 00 00 {...
>>>
>>>Any possible workaround or do I need to upgrade to IIS 6.0, also can I
>>>install IIS 6.0 as a separate component on my 2k box or do I have to
>>>upgrade
>>>to 2k3
>>
>> IIS will not log to a remote server. You can do ODBC logging, or use
>> a script to copy the log to a remote server after it rolls over, but
>> there is no way to force IIS to log to a remote server.
>>
>> Jeff
>
>
Bernard [ Di, 15 Februar 2005 10:13 ] [ ID #644305 ]

Re: IIS logging to remote server

On Tue, 15 Feb 2005 00:05:09 -0500, "Joe" <me [at] me.com> wrote:

>you think this might help
>http://support.microsoft.com/default.aspx?scid=kb;en-us;289 655
>
>and I guess when you say IIS will not log to a remote server you mean IIS
>5.0

Yes, IIS5. And Null session shares is inviting trouble from a
security standpoint, though I've never tried it for logging.

If you want to log to a remote share, you need to upgrade to Server
2003/IIS6. Sorry I didn't read the entire question before answering
just a piece of it.

Jeff


>"Jeff Cochran" <jeff.nospam [at] zina.com> wrote in message
>news:42187c4a.6633999 [at] msnews.microsoft.com...
>> On Sun, 13 Feb 2005 16:05:45 -0500, "Joe" <me [at] me.com> wrote:
>>
>>>we run IIS 5.0, I would very much like to send all log files to a remote
>>>server, but IIS doesn't allow changing to logging to a remote server, so I
>>>got myself a copy of metaedit and changed it, it took the change but IIS
>>>is
>>>unable to create the log folder regardless of all proper security in
>>>place,
>>>event reports the following
>>>
>>>Event Type: Error
>>>Event Source: IISLOG
>>>Event Category: None
>>>Event ID: 2
>>>Date: 2/13/2005
>>>Time: 3:45:28 PM
>>>User: N/A
>>>Computer: IIS
>>>Description:
>>>IIS Logging was unable to create the directory \\server\share\W3SVC1. The
>>>data is the error.
>>>For additional information specific to this message please visit the
>>>Microsoft Online Support site located at:
>>>http://www.microsoft.com/contentredirect.asp.
>>>Data:
>>>0000: 7b 00 00 00 {...
>>>
>>>Any possible workaround or do I need to upgrade to IIS 6.0, also can I
>>>install IIS 6.0 as a separate component on my 2k box or do I have to
>>>upgrade
>>>to 2k3
>>
>> IIS will not log to a remote server. You can do ODBC logging, or use
>> a script to copy the log to a remote server after it rolls over, but
>> there is no way to force IIS to log to a remote server.
>>
>> Jeff
>
jeff.nospam [ Di, 15 Februar 2005 12:19 ] [ ID #645454 ]
Webserver » microsoft.public.inetserver.iis.security » IIS logging to remote server

Vorheriges Thema: properties page does not display
Nächstes Thema: ASP and security