Log Encyclopedia

Windows IIS W3C Log

W3C extended format produced by Internet Information Services web servers.

Category: Web Server

Regex Pattern

^(?<date>\d{4}-\d{2}-\d{2})\s+(?<time>\d{2}:\d{2}:\d{2})\s+(?<s_ip>\S+)\s+(?<cs_method>\S+)\s+(?<cs_uri_stem>\S+)\s+(?<cs_uri_query>\S*)\s+(?<s_port>\d+)\s+(?<cs_username>\S*)\s+(?<c_ip>\S+)\s+(?<cs_user_agent>\S+)\s+(?<sc_status>\d{3})\s+(?<sc_substatus>\d+)\s+(?<sc_win32_status>\d+)\s+(?<time_taken>\d+)$

DuckDB Schema

date DATE, time TIME, s_ip VARCHAR, cs_method VARCHAR, cs_uri_stem VARCHAR, cs_uri_query VARCHAR, s_port INTEGER, cs_username VARCHAR, c_ip VARCHAR, cs_user_agent VARCHAR, sc_status INTEGER, sc_substatus INTEGER, sc_win32_status INTEGER, time_taken INTEGER

Ready to analyze?

Click below to open the local DuckDB tool preloaded for Windows IIS W3C Log.

Analyze Now (Local & Private)Prefilled SQL: SELECT * FROM log_table LIMIT 200;