SharePoint - log in request tracking

What is the best way to see which users accessed a web app on a particular day.  Must be something other than Usage Reporting / Web Analytics.  Our environment is SharePoint 2010.
LVL 38
Justin SmithSr. System EngineerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

dp_expertCommented:
OOB there is nothing. What you are missing from the Usage Reporting?
0
Justin SmithSr. System EngineerAuthor Commented:
No way through IIS logs or anything?  what about the ULS logs of 2010?

Web Analytics database was messed up, so it doesn't have the data we need for the particular day.
0
dp_expertCommented:
You can find something in IIS logs - depending on how it was configured. We used to use the IIS logs to monitor our Sharepoint-based site usage, so this could be a goog lead. Depending on how you had it set up.
Do you have IIS 6 or 7?
The same goes with ULS - if it was set up to higher filtering levels then you wouldn't get too much.
What info you need to find? Who has accessed given web page or who has done some action (deleted something)?
0
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

Justin SmithSr. System EngineerAuthor Commented:
IIS 7

We wanted to know which users accessed any SharePoint sites on a particular day.
0
dp_expertCommented:
Ok
On my test environment with all standard settings in the IIS 7.0 I have found info about users in this form:
2010-08-16 12:16:27 fe80::4055:d528:f05c:4762%16 GET / - 80 DEVX64\Administrator fe80::d154:9bbb:c2de:b6e0%16 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.1;+Trident/4.0;+SLCC2;+.NET+CLR+2.0.50727;+.NET+CLR+3.5.30729;+.NET+CLR+3.0.30729;+Media+Center+PC+6.0;+OfficeLiveConnector.1.4;+OfficeLivePatch.1.3;+Tablet+PC+2.0;+InfoPath.3;+MS-RTC+LM+8;+.NET4.0C) 200 0 0 15441
 2010-08-16 12:16:49 fe80::4055:d528:f05c:4762%16 GET /Pages/Default.aspx - 80 devx64\administrator fe80::d154:9bbb:c2de:b6e0%16 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.1;+Trident/4.0;+SLCC2;+.NET+CLR+2.0.50727;+.NET+CLR+3.5.30729;+.NET+CLR+3.0.30729;+Media+Center+PC+6.0;+OfficeLiveConnector.1.4;+OfficeLivePatch.1.3;+Tablet+PC+2.0;+InfoPath.3;+MS-RTC+LM+8;+.NET4.0C) 200 0 0 21453
 - so you get the date, page address and user login and IP (here it's v6) . So if you havn't changed anything in your IIS settings you should get the same.
Sorry, I forgot about the IIS logs.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Justin SmithSr. System EngineerAuthor Commented:
thanks boss.  I tried using a IIS log parser on codeplex but it didn't really give me user info.  I'll look a bit closer based on your response.
0
dp_expertCommented:
I usualy just use Excel - copy the data and split it by space character. Needs a bit fiddling afterwards but does the job quite well.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft SharePoint

From novice to tech pro — start learning today.