Submit a ticketCall us

Announcing NCM 7.7
With NCM 7.7, you can examine the rules that make up an access control list for a Cisco ASA device. Then you can apply filters to display only rules that meet the specified criteria, order the rules by line number or by the hit count, and much more.
See new features and improvements.

Home > Success Center > Log & Event Manager (LEM) > Unable to start the IIS Web or FTP server connector in LEM

Unable to start the IIS Web or FTP server connector in LEM

Created by Interspire Import, last modified by Geoffrey Layton on Sep 15, 2016

Views: 78 Votes: 1 Revisions: 25

Updated 7/7/2016


The Microsoft Internet Information Services (IIS) Web Server or Microsoft IIS FTP Server connector does not start in the LEM Console.


  • All LEM versions
  • All Microsoft Windows Server and IIS versions


This can occur when the logging levels are not disabled or are set too low in the IIS Manager.


1. Stop the LEM Agent.

2. Open the Microsoft IIS Manager and configure the W3C format by selecting the following Logging options using the Configure Logging at the Site Level procedure from the Microsoft website:

  • One log file per: Site
  • Format: W3C
  • W3C Logging Fields: All available fields

3. Go to the website and copy the logging options from the IIS instance.

4. Move the files currently in C:\inetpub\logs\LogFiles to a different location. Otherwise, LEM will attempt to read data from the old log files in this folder and the connector and may not start.​

5. Start the LEM Agent.


If the connector still does not start. Try deleting and recreating the connector.


Note: If your IIS log files have a "_x" suffix, that signifies Enhanced Logging. In that case, you should be using the Microsoft IIS W3C v8.5 Enhanced Logging connector.

Last modified
14:50, 15 Sep 2016