Hi.
I've been writing a few scripts to consolidate IIS logfiles from some sites running on a webfarm in to single IIS files that are to be migrated to a single server setup. I'm doing this in a few steps as I had performance problems and crashes if I tried to process a few years of data in one go 
Step 1 is to consolidate the hourly logs for each server in to monthly (or yearly) depending on their size).
Step 2 is to combine each log file of the same date range for each server in to one master logfile.
Step 1 is where I am having the problem though, here is my script (run on LogParser 2.2):
"logparser -i:IISW3C -e 1000 -o:W3C "SELECT date, time, cs-method, cs-uri-stem, cs-uri-query, cs-username, c-ip, cs-version, cs(User-Agent), cs(Referer), sc-status, sc-bytes INTO C:\LogParser\Test-109.log FROM C:\LogParser\109\ex99*.log ORDER BY date, time ASC"
I would expect this script to only look for log files written in 1999 (The file names are standard IIS format - "exyymmddhh.log". In this case my input folder contains log files from ex07mmddhh to ex0508ddhh but LogParser writes an output file with records it has retrieved from files it should not have touched?! It seems to have picked up 219 records from dates that are in logfiles that can't possible match the ex99*.log input format. For example 2005-11-23 - logfile ex05112320.log
I can try it with different years and still get data that should be there. There are some years that give me nothing though. It's something I could work around but it's making me lose faith in how reliable the combined of log files are for years where I actually do have data!
Any comment would be much appreciated.
Thanks. Phil