Hi All: I have urlscan 3.1 runing on IIS7.5. I modified the URLScan.ini to log to a separate location "e:\urlscan".
URLscan is writing a daily log file to that directory, but nothing's being logged. All I see in the log is:
#Software: Microsoft UrlScan 3.1 #Version: 1.0 #Date: 2014-03-01 00:01:26 #Fields: Date Time c-ip s-siteid cs-method cs-uri x-action x-reason x-context cs-data x-control #Software: Microsoft UrlScan 3.1 #Version: 1.0 #Date: 2014-03-01 05:52:12 #Fields: Date Time c-ip s-siteid cs-method cs-uri x-action x-reason x-context cs-data x-control #Software: Microsoft UrlScan 3.1 #Version: 1.0
I know that it's working because I'm seeing errors in my failed request logs, e.g.:
http://www.mysite.com:80/Rejected-By-UrlScan?~/catalog&display_url=mysite.com&google_click_url=http://googleads.g.doubleclick.net/aclk?sa=l&ai=Cae7-rJMTU-auCPKAwgHmo4DoAdvmlpkG666i34IBwI23ARABIIe8ph5Qos7F3wZgyQagAZWtpM4DyAEE4AIAqAMBqgS5AU_QyvvNlgazFNLauJngqm ...
In the example above, I need to see why it's blocking the above URL, but I don't know which rule is being hit.
Is there something in the .INI that would prevent hits from being logged?