Change the way IIS 6.0 Log order

I recently change in our Web site in windows 2000 server iis 5.0 to
windows 2003 iis environment and same problem in log order format

IIS 5.0 writes the W3C Extended Log File Format
W3C Extended Log File Format

#Fields: date time c-ip cs-username s-ip s-port cs-method cs-uri-stem
cs-uri-query sc-status sc-bytes cs-bytes cs(User-Agent) cs(Referer)

IIS 6.0 writes the W3C Extended Log File Format
W3C Extended Log File Format

#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs(User-Agent) cs(Cookie) cs(Referer) sc-status
sc-bytes

any help that you can provide

David
Thu Jul 14 00:42:59 CDT 2005

This is by-design. According to W3C spec, the field order is configurable
and the # comment defines the order.

You can use a tool like LogParser to post-process the log file and reorder
fields if your log analysis tool does not conform to spec.

http://www.microsoft.com/downloads/details.aspx?FamilyID=890cd06b-abf8-4c25-91b2-f8d975cf8c07&displaylang=en

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
<vivek@texworld.com> wrote in message
news:1121312453.233678.141130@g43g2000cwa.googlegroups.com...
I recently change in our Web site in windows 2000 server iis 5.0 to
windows 2003 iis environment and same problem in log order format

IIS 5.0 writes the W3C Extended Log File Format
W3C Extended Log File Format

#Fields: date time c-ip cs-username s-ip s-port cs-method cs-uri-stem
cs-uri-query sc-status sc-bytes cs-bytes cs(User-Agent) cs(Referer)

IIS 6.0 writes the W3C Extended Log File Format
W3C Extended Log File Format

#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs(User-Agent) cs(Cookie) cs(Referer) sc-status
sc-bytes

any help that you can provide

Kristofer
Thu Jul 14 01:23:26 CDT 2005

Hello,

According to "W3C Working Draft WD-logfile-960323" there is no fixed order
for the fields. The order used should be defined by the header field
(which IIS does). Your log analyser should be able to handle this.

No, you cannot change the order. You could process the file after IIS has
finished writing in it, and change the order manually, or by a script.


"W3C Working Draft WD-logfile-960323"
http://www.w3.org/TR/WD-logfile.html


--
Regards,
Kristofer Gafvert (IIS MVP)
www.gafvert.info - My Articles and help
www.ilopia.com


vivek@texworld.com wrote:

> I recently change in our Web site in windows 2000 server iis 5.0 to
> windows 2003 iis environment and same problem in log order format
>
> IIS 5.0 writes the W3C Extended Log File Format
> W3C Extended Log File Format
>
> #Fields: date time c-ip cs-username s-ip s-port cs-method cs-uri-stem
> cs-uri-query sc-status sc-bytes cs-bytes cs(User-Agent) cs(Referer)
>
> IIS 6.0 writes the W3C Extended Log File Format
> W3C Extended Log File Format
>
> #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
> cs-username c-ip cs(User-Agent) cs(Cookie) cs(Referer) sc-status
> sc-bytes
>
> any help that you can provide