Home / user-161572

Jan Reilink's questions

Martin Hope
Jan Reilink
Asked: 2019-02-14 18:09:22 +0800 CST
  • 1

Please note, this is a copy/cross-post from forums.iis.net.

On various IIS 10.0 web servers (build 14393 and 17763), we have enabled customFields for "to help identify weak TLS usage"

For a couple of servers, this works and new logfiles are create, on the majority it doesn't work: logfiles with customfields are not created and the eventlog shows ID 2309:

The loghttp module in the worker process with id '9784' removed custom log data for '3' request(s) which was not claimed by the W3C Logging Service.

But as soon as I transfer a website not logging customfields (using msdeploy), to a different web server the customfield logs are created. And other websites on that last server may or may not be logging the customfields...

I created the configuration using PowerShell:

Add-WebConfigurationProperty -pspath 'MACHINE/WEBROOT/APPHOST' -filter "system.applicationHost/sites/siteDefaults/logFile/customFields" -name "." -value @{logFieldName='crypt-protocol';sourceName='CRYPT_PROTOCOL';sourceType='ServerVariable'}
Add-WebConfigurationProperty -pspath 'MACHINE/WEBROOT/APPHOST' -filter "system.applicationHost/sites/siteDefaults/logFile/customFields" -name "." -value @{logFieldName='crypt-cipher';sourceName='CRYPT_CIPHER_ALG_ID';sourceType='ServerVariable'}
Add-WebConfigurationProperty -pspath 'MACHINE/WEBROOT/APPHOST' -filter "system.applicationHost/sites/siteDefaults/logFile/customFields" -name "." -value @{logFieldName='crypt-hash';sourceName='CRYPT_HASH_ALG_ID';sourceType='ServerVariable'}
Add-WebConfigurationProperty -pspath 'MACHINE/WEBROOT/APPHOST' -filter "system.applicationHost/sites/siteDefaults/logFile/customFields" -name "." -value @{logFieldName='crypt-keyexchange';sourceName='CRYPT_KEYEXCHANGE_ALG_ID';sourceType='ServerVariable'}

What am I missing here?

ssl