Configuring IIS module in Filebeat

This integration requires the UTMStack Windows agent to work properly. Please, make sure you have installed it before you continue.

The IIS module parses access and error logs created by the Internet Information Services (IIS) HTTP server.

Compatibility

The IIS module parses access and error logs created by the Internet Information Services (IIS) HTTP server. This module works only on Windows.

1. Enable IIS module

cd "C:\Program Files\UTMStack\UTMStack Agent\beats\filebeat\" && filebeat modules enable iis

2. Configure IIS module

Configure the module configuration file according to the image below. You can find it in the path:

C:\Program Files\UTMStack\UTMStack Agent\beats\filebeat\modules.d\iis.yml

Important!! After a Filebeat module is enabled, the service needs to be restarted using the following command:

sc stop ModulesLogsCollector && timeout /t 5 && sc start ModulesLogsCollector