RSA Admin

IIS Exchange report including the cs-User-Agent field

Discussion created by RSA Admin Employee on Aug 19, 2008
Latest reply on Oct 22, 2008 by RSA Admin

Hi, I have IIS logs sending to our enVision appliance and want to use it to report on our user's handhelds connecting to our Exchange servers and the type of handheld device they are using. The report is a simple one, it needs only 4 fields; username, date (no time), status (success/fail) and device type.

 

I have the report sorted with the exception of the device type field. The IIS logs have a "cs(User-Agent)" field, however, this one does not seem to appear in enVision's "Web Accounting" options.

 

Does anyone know how I can get this field into a report?

Outcomes