How can I make IIS logs produce data more often?

A common problem with IIS is that it doesn't always flush data to the active log file in real time. If data is not flushed to the log file on a consistent basis then there may be sporadic times when there won't be any new IIS log data for EventSentry (or any other application) to read and capture. Symptoms include having to wait several minutes or more between the time an activity occurs and the time an activity generates an alert or appears in the web reports.

As long as your IIS server has Windows Powershell installed, you can use one of the scripts below (either with an embedded script, the EventSentry Application Scheduler or with Windows Task Scheduler) to ensure that your IIS data is available on a consistent basis such as every minute or every 5 minutes. However often you schedule the script (every minute, every 5 minutes, etc) determines how often the IIS data will be flushed and made available for monitoring.

To ensure that you use the correct script for your needs, in IIS Manager please inspect the Logging settings for your site and see if the "Use local time for file naming and rollover" checkbox is enabled. If it is enabled, download and then schedule the "iis_powershell_local_time" script, and if it is not enabled, download and then schedule the "iis_powershell_non_local_time" script after configuring your $utc_offset value in the script.


Download iis_powershell_local_time.zip
Download iis_powershell_non_local_time.zip