Skip to content

Lookups for the Splunk Add-on for Microsoft IIS

The Splunk Add-on for Microsoft IIS has one lookup. The lookup file maps fields from Microsoft IIS systems to CIM-compliant values in the Splunk platform. The lookup file is located in $SPLUNK_HOME/etc/apps/Splunk_TA_microsoft-iis/lookups.

Filename Description
iis_action_lookup.csv Maps Microsoft iis_status to action