问题
I'm maintaining a website that seems to be generating a lot of connection dropped errors in the HttpErr logs. I'm trying to match up the errors in the HttpErr logs with log entries in the IIS logs, to see what additional information I can glean (eg time taken, response status code).
I'm having trouble matching up records in the HttpErr logs with the corresponding requests in the IIS logs. Although I can see requests from the same IP address in both logs, there seems to be no exact match between the timestamps in the two logs. As a result I can't be sure if a request in the IIS log corresponds to an error in the HttpErr log, or whether they represent two different requests to the same page by the same user.
My question is: Will requests that appear as connection dropped errors in the HttpErr logs also appear in the IIS logs? Or is it an either/or situation, where a request that has the connection dropped is logged to HttpErr but one that completes without the connection being dropped is logged to the IIS logs?
I've had a look at the httpLogging element in the ApplicationHost.config and that has no selectiveLogging attribute. I understand that to mean IIS should log all requests by default. However, does "all" really mean every single request, including those where the connection has been dropped?
回答1:
The HTTPErr.log files is where HTTP.SYS logs its messages. That is before the IIS/website stage of the request pipeline, so you cannot match HTTPerr.log file entries with IIS' website logfiles. However, almost any HTTPErr.log error message indicates a script or site error, therefor it's wise to investigate all sites and scripts that appear in the HTTPErr.log files.
Microsoft explains the HTTP Request Processing in IIS on iis.net and there is also documentation of the Kinds of errors that the HTTP API logs.
来源：https://stackoverflow.com/questions/23863661/will-all-requests-that-appear-in-httperr-logs-also-appear-in-the-iis-logs-by-de