Integration guide for Internet Information Services

Configuring IIS module in Filebeat

This integration requires the UTMStack Windows agent to work properly. Please, make sure you have installed it before you continue.

The IIS module parses access and error logs created by the Internet Information Services (IIS) HTTP server.

The IIS module parses access and error logs created by the Internet Information Services (IIS) HTTP server. This module works only on Windows.

cd "C:\Program Files\UTMStack\UTMStack Agent\beats\filebeat\" && filebeat modules enable iis

Configure the module configuration file according to the image below. You can find it in the path:

C:\Program Files\UTMStack\UTMStack Agent\beats\filebeat\modules.d\iis.yml

Important!! After a Filebeat module is enabled, the service needs to be restarted using the following command:

sc stop ModulesLogsCollector && timeout /t 5 && sc start ModulesLogsCollector

⌘I