Microsoft Internet Information Services (IIS) is an extensible web server software with a large number of features. IIS can be:
- used to host ASP.NET web applications and static websites.
- used as an FTP server, host WCF services.
- extended to host web applications built on other platforms such as PHP.
- used with built-in authentication options such as Basic, ASP.NET, and Windows auth.
- managed via the CLI or using PowerShell.
- used to produce IIS websites with a number of tools, including WebDav and Microsoft Visual Studio.
In the Common Information Model, Microsoft IIS data is typically mapped to the Web data model.
Guidance for onboarding data can be found in the Spunk Documentation:
- Getting Data In (Splunk Enterprise)
- Getting Data In (Splunk Cloud)
- Get data into Splunk Observability Cloud
Refer to the documentation, and note the following:
When your Splunk deployment is ingesting Microsoft IIS data, you can use it to accomplish the following use cases.