-
Notifications
You must be signed in to change notification settings - Fork 0
Prerequisites
Logparser and IIS log fields are the two prerequisites for this module.
WebsiteFailedLogins only needs access to a folder containing Logparser.exe and Logparser.dll. A full installation is unnecessary but will still work.
Place these two files in an accessible folder and update the configuration file with this folder path. The user running this module must have sufficient permission to launch Logparser.exe.
Download URL: https://www.microsoft.com/en-us/download/details.aspx?id=24659
IIS must log using the W3C format and include the following fields.
datetimec-ips-sitenamecs-methodcs-uri-stemsc-status
Logparser will perform a recursive search so specify the parent folder in the configuration file.
While Logparser is very fast, the amount of logs it must parse will have the greatest impact on performance. See the following link for details: https://github.com/phbits/WebsiteFailedLogins/wiki/Performance