topic Re: Trace/Span enrichment for IIS Logs not happening in Log Analytics

Trace/Span enrichment for IIS Logs isn't working

36Krazyfists — Wed, 17 Dec 2025 13:42:07 GMT

As the title states, none of our IIS logs (W3SVC) have any kind of Trace or Span enrichment. This is a shame because IIS logs are really detailed and have a lot of the same info that the traces have, so not being able to correlate them together easily so that we can verify something we are seeing in the trace versus the logs (or vice versa) is a pain.

We see other good enrichment like the process groups and host/host-group fields as well as the IIS Site Name and App pool name and all that stuff, but not the actual trace id or span id.

Are we supposed to be seeing the trace and span id's in the logs in Dynatrace? If so, is there something we need to do to enable that? If not, why is Dynatrace not able to enrich the logs with that info when it can enrich it with everything else?

Re: Trace/Span enrichment for IIS Logs not happening

AntonPineiro — Wed, 22 Oct 2025 13:51:11 GMT

Hi,

Have you check oneagent features to know if log enrinment options are enabled?

Best regards

Re: Trace/Span enrichment for IIS Logs not happening

36Krazyfists — Thu, 23 Oct 2025 17:35:00 GMT

Yes, and they are. We don't have any problem with trace enrichment for other logs. Even app logs for services on the same hosts with IIS. Those app logs get enriched with trace and span just fine, but the IIS logs do not...

It really stinks because IIS logs don't have millisecond resolution (how Microsoft only offers one second resolution for logs as busy as IIS request logs I will never understand, and they deprecated Advanced Logging which was the only way to actually add in logging with fractional second timestamps...), and I was hoping to be able to join my log queries to the trace/span tables using DQL and be able to actually sort the logs by time, but as it is now, I can't do that because there is no trace/span id in the IIS logs...

Re: Trace/Span enrichment for IIS Logs not happening

siavash1996 — Thu, 23 Oct 2025 18:17:43 GMT

We've never been able to automatically enrich IIS logs for trace correlation either.

Re: Trace/Span enrichment for IIS Logs not happening

Julius_Loman — Fri, 24 Oct 2025 05:54:58 GMT

Enriching of IIS logs is not supported.