Yes, make sure the following fields are enabled in your IIS logging:
cs_Referer
cs_version
cs_bytes
cs_Cookie
We pretty much enabled all the IIS logging and the app looks pretty good. Make sure to read up on the threads in here, we had to make a change to the Data Model in order for the app to work in a search head cluster. Also, read the latest update on http_user_agent.
https://answers.splunk.com/answers/442049/splunk-app-for-web-analytics-http-user-agent-missi.html#comment-641842
... View more