# IIS logs and hardware requirements

**URL:** <https://discuss.elastic.co/t/iis-logs-and-hardware-requirements/225012>\
**Category:** Elasticsearch\
**Created:** [March 25, 2020, 3:40pm UTC](https://discuss.elastic.co/t/iis-logs-and-hardware-requirements/225012 "2020-03-25T15:40:31Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![devagp](https://avatars.discourse-cdn.com/v4/letter/d/ecb155/32.png) [@devagp](https://discuss.elastic.co/u/devagp)\
**Post date:** [March 25, 2020, 3:40pm UTC](https://discuss.elastic.co/t/iis-logs-and-hardware-requirements/225012/1 "2020-03-25T15:40:31Z")

</div>

Hello everyone, I'm new here and I would like to take some questions before using elastic.

1. Can I collect logs from an IIS 10 website? Which tool do I use? Can I use the opensource version?
2. If question number 1 is ok, what hardware will I need just to use this daily collection of iis logs?

thanks.

---

<div class="post-metadata">

**Author:** ![willemdh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/willemdh/32/16922_2.png) [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Post date:** [March 25, 2020, 4:10pm UTC](https://discuss.elastic.co/t/iis-logs-and-hardware-requirements/225012/2 "2020-03-25T16:10:32Z")

</div>

Welcome @devagp,

1. Yes, you can definitely use Elastic for IIS log collection. Imho you will need a basic license (which is free), which has several advantages. Please check [https://www.elastic.co/subscriptions](https://www.elastic.co/subscriptions) for details. You will need at least Elasticsearch, Kibana and Filebeat. See [https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-iis.html](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-iis.html) for more info about the IIS module

_One caveat is that the IIS log settings need to be set correct and idential on all IIS servers. Another is that in order to get the forwarded ip (if behind load balancer), you will have to make a small update to the grok pattern used in the ingest pipeline._

1. Impossible to answer, depends on a lot of unknown variables...

Grtz

Willem

---

<div class="post-metadata">

**Author:** ![devagp](https://avatars.discourse-cdn.com/v4/letter/d/ecb155/32.png) [@devagp](https://discuss.elastic.co/u/devagp)\
**Post date:** [March 26, 2020, 12:58pm UTC](https://discuss.elastic.co/t/iis-logs-and-hardware-requirements/225012/3 "2020-03-26T12:58:32Z")

</div>

Thanks... 😉

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 23, 2020, 12:58pm UTC](https://discuss.elastic.co/t/iis-logs-and-hardware-requirements/225012/4 "2020-04-23T12:58:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.