The following examples show how message transaction data is recorded and displayed in each of the four log formats. Log entries for SMTP transmissions typically include multiple records. Only one record is shown for each format so you can see the differences between them.
The example log entries below would be made when Maria of nwtraders.microsoft.com sends a message to a colleague at Microsoft.com on August 18, 1997 at approximately 1:17 pm.
Microsoft IIS Log File Format
10.121.82.2, nwtraders.microsoft.com, 8/18/97, 13:17:37, SMTPSVC1, MAIL01, 172.17.131.28, 90, 42, 0, 250, 0, MAIL FROM, -, FROM:<firstname.lastname@example.org>,
NCSA Common Log File Format
10.121.82.2 - nwtraders.microsoft.com [18/Aug/1997:13:17:37 - 0800] "MAIL FROM -? FROM: maria HTTP/1.0 250 0
W3C Extended Log File Format
The following example includes default settings only. The WC3 format allows you to add extended logging properties. These extended properties are described in full in the Microsoft Internet Information Services (IIS) documenation.
13:17:37 10.121.82.2 MAIL FROM - 250
The database includes the following records: