Sorry, I missed that part. But as
Rovastar mentioned, use the COUNT function:
SELECT date, time, c-ip, cs-uri-stem, cs-method, sc-status, COUNT(*) FROM c:\logs\08-08\0808.log WHERE (cs-method = 'POST') AND (sc-status = 200)
ORDER BY cs-uri-stem
Sorry, I missed that part. But as
Rovastar mentioned, use the COUNT function:
SELECT date, time, c-ip, cs-uri-stem, cs-method, sc-status, COUNT(*) FROM c:\logs\08-08\0808.log WHERE (cs-method = 'POST') AND (sc-status = 200)
ORDER BY cs-uri-stem
I have tried this:
SELECT COUNT(cs-uri-stem) FROM c:\logs\08-08\0808.log WHERE (cs-method = 'POST') AND (sc-status = 200) GROUP BY cs-uri-stem
I get this as the output:
Count(ALL cs-uri-stem)
1 26
2 21
Instead of the label of 1 and 2 I would like to get the label of the cs-uri-stem values like:
SELECT cs-uri-stem, cs-method, sc-status, COUNT(*) FROM c:\logs\08-08\0808.log
WHERE (cs-method = 'POST') AND (sc-status = 200) AND (cs-uri-stem = '/ReservationForm.aspx and /ContactForm.aspx') GROUP BY cs-uri-stem ORDER BY COUNT(*) Desc
I have noticed minor changes in lizard GUI from the previous download (ex. syntax highlight). Is this release official or beta? Can you please add option for importing queries because I need my old queries from the previous installation? Can I parse Cisco ASA Logs
too? Btw helpful tool.
I didn't try it, but I think newer version should keep your queries. Or, you can just save and then copy your old query file from C:\Program Files\LizardLabs\Log Parser Lizard\Queries.xml over. Log Parser can parse basically anything. You can always use
TEXTLINE or TEXTWORD input formats.
Edgar the Pa...
13 Posts
Re: New GUI tool for MS Log Parser, Log Parser Lizard
Nov 18, 2008 03:33 PM|LINK
Sorry, I missed that part. But as Rovastar mentioned, use the COUNT function:
SELECT date, time, c-ip, cs-uri-stem, cs-method, sc-status, COUNT(*) FROM c:\logs\08-08\0808.log WHERE (cs-method = 'POST') AND (sc-status = 200) ORDER BY cs-uri-stem
Photo_Joe
6 Posts
Re: New GUI tool for MS Log Parser, Log Parser Lizard
Nov 18, 2008 04:09 PM|LINK
I have tried this:
SELECT COUNT(cs-uri-stem) FROM c:\logs\08-08\0808.log WHERE (cs-method = 'POST') AND (sc-status = 200) GROUP BY cs-uri-stem
I get this as the output:
Count(ALL cs-uri-stem)
1 26
2 21
Instead of the label of 1 and 2 I would like to get the label of the cs-uri-stem values like:
/ReservationForm.aspx and /ContactForm.aspx.
Edgar the Pa...
13 Posts
Re: New GUI tool for MS Log Parser, Log Parser Lizard
Nov 18, 2008 05:25 PM|LINK
Then the query would look like this:
SELECT cs-uri-stem, cs-method, sc-status, COUNT(*)
FROM c:\logs\08-08\0808.log
WHERE (cs-method = 'POST') AND (sc-status = 200) AND (cs-uri-stem = '/ReservationForm.aspx and /ContactForm.aspx')
GROUP BY cs-uri-stem
ORDER BY COUNT(*) Desc
Edgar the Pa...
13 Posts
Re: New GUI tool for MS Log Parser, Log Parser Lizard
Nov 18, 2008 05:30 PM|LINK
Oops! Didn't notice you had two stems in your question. You will have to provide full stem, not just the page:
WHERE (cs-method = 'POST') AND (sc-status = 200) AND (cs-uri-stem LIKE /...'/ReservationForm.aspx' AND /.../ContactForm.aspx')
Photo_Joe
6 Posts
Re: New GUI tool for MS Log Parser, Log Parser Lizard
Nov 19, 2008 12:01 AM|LINK
Here is the query that I have come up with that gives me the results that I was looking for.
Thanks for the help.
Joe
wfg97079
2 Posts
Re: New GUI tool for MS Log Parser, Log Parser Lizard
Nov 26, 2008 02:47 PM|LINK
Is there a query specifically for FTP jobs from IIS?
Edgar the Pa...
13 Posts
Re: New GUI tool for MS Log Parser, Log Parser Lizard
Nov 26, 2008 03:28 PM|LINK
What exactly are you interested about FTP statistics?
wfg97079
2 Posts
Re: New GUI tool for MS Log Parser, Log Parser Lizard
Dec 04, 2008 02:21 PM|LINK
Basically Id like what username logged in from what ip, what commands they issued etcTheMasterPag...
1 Post
Re: New GUI tool for MS Log Parser, Log Parser Lizard
Mar 25, 2009 09:57 PM|LINK
I have noticed minor changes in lizard GUI from the previous download (ex. syntax highlight). Is this release official or beta? Can you please add option for importing queries because I need my old queries from the previous installation? Can I parse Cisco ASA Logs too? Btw helpful tool.
pen1969
1 Post
Re: New GUI tool for MS Log Parser, Log Parser Lizard
Mar 25, 2009 10:38 PM|LINK
I didn't try it, but I think newer version should keep your queries. Or, you can just save and then copy your old query file from C:\Program Files\LizardLabs\Log Parser Lizard\Queries.xml over. Log Parser can parse basically anything. You can always use TEXTLINE or TEXTWORD input formats.