One of the frequently overlooked features added to IIS 6.0 with SP1 was centralized logging.Since we generally will have multiple Virtual Servers (IIS Web Sites) on a server in our farm, this feature will ease our consolidation of IIS logs across the various virtual servers.See:www.microsoft.com/.../...b5-8c38-377300eccb1e.mspxTo enable centralized logging, one must be a local administrator. From the command line type:Adsutil.vbs set w3svc/CentralW3CLoggingEnabled true and restart WWW service.See www.microsoft.com/.../...83-b256-6422a8d817e1.mspx
the challenge for me is to consolidate log files on 2 hosts (sharepoint FE's running NLB). i almost thought this was it! i could use logparser into sql db, or analog i think but i was hoping of an IIS level solution.
The easiest solution for multiple WFEs is to use ISA 2004 as the firewall orproxy. ISA does W3C logs and then you have one log for all servers, not just allvirtual servers.
i guess when it comes to security, i tend not to use ISA.. i tend to secure boxes with unix front-ends..i suppose i could do the apache 2.0 http://www.apacheweek.com/features/reverseproxies reverse proxy..
I am an admitted ISA 2004 bigot.I would put it up against any other firewall, properly configured.