Configuring OWA logs on your Microsoft Exchange Server
To prepare your Microsoft Exchange Server to communicate with IBM QRadar, configure Outlook Web Access (OWA) event logs.
Procedure
- Log into your Microsoft Internet Information System (IIS) Manager.
- On the desktop, select Start > Run.
-
Type the following command:
inetmgr
- Click OK.
- In the menu tree, expand Local Computer.
-
If you use IIS 6.0 Manager for Microsoft Server 2003, complete the following steps:
- Expand Web Sites.
- Right-click Default Web Site and select Properties.
- From the Active Log Format list, select W3C.
- Click Properties.
- Click the Advanced tab.
- From the list of properties, select the Method (cs-method) and Protocol Version (cs-version) check boxes
- Click OK.
-
If you use IIS 7.0 Manager for Microsoft Server 2008
R2, or IIS 8.5 for Microsoft Server 2012 R2, complete the
following steps:
- Click Logging.
- From the Format list, select W3C.
- Click Select Fields.
- From the list of properties, select the Method (cs-method) and Protocol Version (cs-version) check boxes
- Click OK.