# IIS Module - not groking

**URL:** https://discuss.elastic.co/t/iis-module-not-groking/152914
**Category:** Beats
**Created:** [October 17, 2018, 8:53pm UTC](https://discuss.elastic.co/t/iis-module-not-groking/152914 "2018-10-17T20:53:43Z")
**Posts on this page:** 1
**Showing post:** 3

<div class="post-metadata">

### Author: ![devops\_mike](https://avatars.discourse-cdn.com/v4/letter/d/50afbb/32.png) [@devops\_mike](https://discuss.elastic.co/u/devops_mike)
#### Post date: [October 19, 2018, 1:00pm UTC](https://discuss.elastic.co/t/iis-module-not-groking/152914/3 "2018-10-19T13:00:32Z")

</div>

Thanks for the help, steffens!

I am using filebeat version 6.4.2.  
IIS is version 7.

I have also been following this post [Parsing problem for iis server error log using filebeat 6.3.2](https://discuss.elastic.co/t/parsing-problem-for-iis-server-error-log-using-filebeat-6-3-2/148639/5) which I discovered after my post (I tried searching but his didn't come up).

But he stared directly into the abys, and did not survive 🙂

I had read elsewhere that the grok patterns for IIS Module should not be edited. I can't find the source where I read that now. Should I be working with module\iis\error\ingest.json?

---

_[View the full topic](https://discuss.elastic.co/t/iis-module-not-groking/152914)._