Trace/Span enrichment for IIS Logs not happening

[36Krazyfists]

As the title states, none of our IIS logs (W3SVC) have any kind of Trace or Span enrichment.  This is a shame because IIS logs are really detailed and have a lot of the same info that the traces have, so not being able to correlate them together easily so that we can verify something we are seeing in the trace versus the logs (or vice versa) is a pain.

We see other good enrichment like the process groups and host/host-group fields as well as the IIS Site Name and App pool name and all that stuff, but not the actual trace id or span id.

Are we supposed to be seeing the trace and span id's in the logs in Dynatrace?  If so, is there something we need to do to enable that?  If not, why is Dynatrace not able to enrich the logs with that info when it can enrich it with everything else?

[AntonPineiro]

Hi,

Have you check oneagent features to know if log enrinment options are enabled?

Best regards

[36Krazyfists]

Yes, and they are.  We don't have any problem with trace enrichment for other logs.  Even app logs for services on the same hosts with IIS.  Those app logs get enriched with trace and span just fine, but the IIS logs do not...

It really stinks because IIS logs don't have millisecond resolution (how Microsoft only offers one second resolution for logs as busy as IIS request logs I will never understand, and they deprecated Advanced Logging which was the only way to actually add in logging with fractional second timestamps...), and I was hoping to be able to join my log queries to the trace/span tables using DQL and be able to actually sort the logs by time, but as it is now, I can't do that because there is no trace/span id in the IIS logs...

[siavash1996]

We've never been able to automatically enrich IIS logs for trace correlation either. 

[Julius_Loman]

Enriching of IIS logs is not supported.