Skip to content

Commit 0fba911

Browse files
updating iis 7 docs
1 parent ef3dfb7 commit 0fba911

File tree

1 file changed

+20
-16
lines changed
  • docs/integrations/microsoft-azure

1 file changed

+20
-16
lines changed

docs/integrations/microsoft-azure/iis-7.md

Lines changed: 20 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -169,31 +169,35 @@ After a few minutes, your new Source should be propagated down to the Collector
169169

170170
## Field Extraction Rules
171171

172-
* **Name**: Microsoft IIS Logs
173-
* **Scope**: Use the source category set above, such as "IIS_prod"
174-
* **Parse Expression:**
175-
```
176-
parse regex "^[^#].*?(?<s_ip>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}) (?<cs_method>\S+?)
177-
(?<cs_uri_stem>\S+?) (?<cs_uri_query>\S+?) (?<s_port>\d+?) (?<cs_username>\S+?)
178-
(?<c_ip>.+?) (?<cs_User_Agent>\S+?) (?<cs_Referer>\S+?) (?<sc_status>\d+?)
179-
(?<sc_substatus>\d+?) (?<sc_win32_status>\d+?) (?<time_taken>\d+?)$"
180-
```
172+
<br/>
173+
**FER to normalize the fields**. Field Extraction Rule named **AppObservabilityIIS7FER** is automatically created for IIS 7/8 Application Components.
174+
<br/>
181175

182176
## Installing the IIS 7 App
183177

184-
Now that you have set up collection for IIS 7, install the Sumo Logic App for IIS 7 to use the preconfigured searches and dashboards that monitor log events generated by IIS 7.
185-
186-
import AppInstall from '../../reuse/apps/app-install.md';
178+
import AppInstall from '../../reuse/apps/app-install-v2.md';
187179

188180
<AppInstall/>
189181

190-
## Viewing IIS 7 Dashboards
182+
As part of the app installation process, the following fields will be created by default:
183+
* `method`
184+
* `cs_user_agent`
185+
* `c_ip`
186+
* `time_taken`
187+
* `server_ip`
188+
* `s_port`
189+
* `sc_win32_status`
190+
* `sc_status`
191+
* `cs_uri_query`
192+
* `sc_substatus`
193+
* `cs_uri_stem`
194+
* `cs_username`
191195

192-
**Each dashboard has a set of filters** that you can apply to the entire dashboard, as shown in the following example. Click the funnel icon in the top dashboard menu bar to display a scrollable list of filters that are applied across the entire dashboard.
196+
## Viewing IIS 7 Dashboards
193197

194-
You can use filters to drill down and examine the data on a granular level.
198+
import ViewDashboards from '../../reuse/apps/view-dashboards.md';
195199

196-
**Each panel has a set of filters** that are applied to the results for that panel only, as shown in the following example. Click the funnel icon in the top panel menu bar to display a list of panel-specific filters.
200+
<ViewDashboards/>
197201

198202
### Overview Dashboard
199203

0 commit comments

Comments
 (0)