Where is My csHost Field for IIS Logs in OMS Log Analytics?


This is one of those quick blog posts. You may end up in situation where csHost field is missing when you ingest IIS logs.

image

This is just the default behavior. By default IIS web server generates a log with certain fields and host header name is not one of them. The solution is simple. On every IIS server add the fields that you want to be in W3C log. Go to IIS Manager and on the whole server or for specific site click on Logging.

image

Click on Select Fields and select the fields that you want to be added to the log.

image

Note that custom created fields are not ingested by OMS Log Analytics. After that change new logs will contain that field.

image

I hope this was helpful.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.