Internet Information Services (IIS) supports writing logs using the W3C format. This can be done for the WWW, FTP and SMTP services in IIS. These logs provide information on user and server activity. GFI EventsManager can then be configured to collect, process and archive these logs, and alerts can be generated when specific logging is encountered.
The following Microsoft knowledge base article explains how to enable W3C logging in IIS: