• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 424
  • Last Modified:

windows server 2008, see a log of all ip address vistors

how to see all ip addresses visited and error code
0
rgb192
Asked:
rgb192
2 Solutions
 
JoltinJoeCommented:
I see the IIS tag, so assuming we are looking for web visitors, by default IIS logs data to \inetpub\logs\LogFiles.

In the case of a default installation of IIS to the C: drive, it would be C:\Inetpub\logs\LogFiles\W3SVC1.  The HTTP code is the fourth number from the end of the line by default (sc-status).
0
 
BlackIce80Commented:
to get a overview you could use logparser from microsoft for your logfiles:
http://www.microsoft.com/downloads/details.aspx?FamilyID=890cd06b-abf8-4c25-91b2-f8d975cf8c07&displaylang=en


and use a statement like this:
logparser "select c-ip, sc-status from \\webserver\logfilepath\u_Ex091218.log"

or grouped by ip&status with number of events:
logparser "select c-ip,sc-status,count(*) from \\webserver\logfilepath\u_Ex091218.log group by c-ip,sc-status"

you could even do this for all logfiles/days in one statement:
logparser "select c-ip,sc-status,count(*) from \\webserver\logfilepath\*.log group by c-ip,sc-status"
0
 
rgb192Author Commented:
thanks
0

Featured Post

Get your Disaster Recovery as a Service basics

Disaster Recovery as a Service is one go-to solution that revolutionizes DR planning. Implementing DRaaS could be an efficient process, easily accessible to non-DR experts. Learn about monitoring, testing, executing failovers and failbacks to ensure a "healthy" DR environment.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now