Skip Navigation

IIST-SV-000102: Enable enhanced logging

Enhanced logging for the IIS 10.0 web server must be enabled and must capture all user and web server events.
To check compliance with IIST-SV-000102, complete the following steps:
  1. Open the IIS 10.0 Manager.
  2. Click the IIS 10.0 web server name.
  3. Click the
    Logging
    icon.
  4. Under
    Format
    , select
    W3C
    .
  5. Click
    Select Fields
    and verify that at least one of the following fields are selected:
    • Date
    • Time
    • Client IP Address
    • User Name
    • Method
    • URI Query
    • Protocol Status
    • Referrer
If no options are selected, your server is not compliant.
If your server is not compliant, complete the following steps:
  1. Open the IIS 10.0 Manager.
  2. Click the IIS 10.0 web server name.
  3. Click the
    Logging
    icon.
  4. Under
    Format
    , select
    W3C
    .
  5. Select the following fields:
    Date
    ,
    Time
    ,
    Client IP Address
    ,
    User Name
    ,
    Method
    ,
    URI Query
    ,
    Protocol Status
    , and
    Referrer
    .
  6. In the
    Actions
    pane, click
    Apply
    .