I need some help regarding how to log the user-name into apache logs. I'm building a use-case for Security Information Event Management.

Is the method the same in case of IIS or just applicable to apache?


Usually, the basic authentication user name is placed into apache logs by default. From http://httpd.apache.org/docs/1.3/logs.html a typical log configuration is

LogFormat "%h %l %u %t \"%r\" %>s %b" common
CustomLog logs/access_log common

Where %u is the user name.

I'm not very familiar with iis, but it appears that the basic authentication user name is logged as cs-username. Here is the documentation http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/676400bc-8969-4aa7-851a-9319490a9bbb.mspx

  • Great help:) Stephen – asadz Feb 11 '13 at 15:06

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.