Search results matching tag 'IIS Input Format'

RE: Converting IIS Log Time to Local Time

LogParser User : epoh977 — Fri, 11 May 2007 15:08:00 GMT

Try this:

LogParser "SELECT TO_TIMESTAMP(date, time) AS utc-timestamp, TO_LOCALTIME(utc-timestamp) AS local-timestamp, c-ip, cs-username, EXTRACT_TOKEN(cs-uri-stem,-1,'/') AS filename INTO DATAGRID FROM \\WEBSERVER\admin$\system32\logfiles\w3svc1\ex07*.log"

It worked for me.

RE: Combine IIS fields to create SQL Date

LogParser User : epoh977 — Thu, 10 May 2007 18:00:00 GMT

Never mind, I found it of course in the thourough help file.

It is "TO_TIMESTAMP "

Works flawlessly.

Combine IIS fields to create SQL Date

LogParser User : epoh977 — Thu, 10 May 2007 17:44:00 GMT

How can I combine two IIS fields (date, time) to create a field in a SQL table that is a TimeStamp?

Starter to Logphaser

LogParser User : parsernovice — Thu, 05 Apr 2007 14:40:00 GMT

logparser -q -statsFF "SELECT distinct c-ip, cs-username FROM ex*.log WHERE c-ip NOT LIKE '%%168.114.191%%'" -rtp:-1

running the above gives me the output below

90.9.253.132    -
90.9.253.132    test1
214.230.225.208 -
214.230.225.208 test2
76.132.136.195 -
76.132.136.195 test3
212.139.115.4   -
81.240.77.124   -
81.240.77.124   test4

I want to remove the extra logs where the IP is recurring with the [-] as the cs-username. So at the end i want the following made up output

90.9.253.132    test1
214.230.225.208 test2
76.132.136.195 test3
212.139.115.4   -       << this is distinct and didnt have a duplicate so i want it to be kept.
81.240.77.124   test4

also, i require the last logged TIME entry of the field c-ip or cs-username. included in the above SQL statement, any help?

Thanks

RE: PageViews and Unique are ok, but how do I calculate visits?

LogParser User : Jeff — Thu, 22 Feb 2007 16:37:00 GMT

The big problem with Log Parser and User level statistics is that Log Parser is designed to focus on a row of data and does not cross the row boundary. When faced with a problem that goes cross rows, you really need to write a little code. Just keep track of the first and last time for a "user" and clear/dump them when the last time is too far away from the "current" time (I have hacked similar using a pair of arrays in Java - nothing I would let anyone look at, but it can be done).

The hardest part is actually defining "user". This is simple if you force authentication. If you don't, then you have to worry about proxies verses users.

RE: PageViews and Unique are ok, but how do I calculate visits?

LogParser User : squadjot — Sun, 18 Feb 2007 02:48:00 GMT

nice querys tho.. very interesting for a newbie like me..

WebLogExpert (Pro trial priod) gives me output like this
The one called total visitors is users that has been away from the site more than 30 minutes (this is something that u set analyzer options panel)
Unfortuneatle i could not disable it..to see if it gave the same result as your "time sesssion" - query. I could set it at 10000 minutes at max..but the two numbers were not that far from eachother.

*Hits*
Total Hits	744,422
Average Hits per Day	9,667
Average Hits per Visitor	25.05
Cached Requests	67,743
Failed Requests	13,257
*Page Views*
Total Page Views	37,320
Average Page Views per Day	484
Average Page Views per Visitor	1.26
*Visitors*
Total Visitors	29,716
Average Visitors per Day	385
Total Unique IPs	23,220
Bandwidth
Total Bandwidth	0 B
Average Bandwidth per Day	0 B
Average Bandwidth per Hit	0 B
Average Bandwidth per Visitor	0 B

If you have more sweet query lines throw them this way ^_^

cannot find end of line

LogParser User : eliassal — Tue, 12 Dec 2006 15:07:00 GMT

Hi, I am parsing IIS log and sometimes with the switch -e:1000 I get some errors displayed as follows

************************************************

Cannot find end-of-line - extra characters detected at the end of log entry
LogFile "\\WEBserver\LogFiles\W3SVC2\ex061211.log", Row number 411810

*************************************************

I checked the line , the line ends with 3 dashes as follows

2006-12-11 22:17:50 172.185.254.41 - W3SVC2 WEBserver 192.20.128.71 80 - /software/guide_cederoms_2006/img/19.gif - 400 87 224 283 0 SEGMENTDATE=11%2F12%2F2006+23%3A15%3A59; SEGMENT=100; NBART=0; SID=53165d95%2Dfd67%2D87a3%2Df992%2Db3b3240d5504; UID=097ff39c0%2D2f8a%2D9257%2De96c%2Dee75a00822c2; Nav2=1677832/; CR=0/2/0/0/; LSA=1677832|-2; LSASubsite=-2=2=1677832 - - -

Thanks in advance

RE: PageViews and Unique are ok, but how do I calculate visits?

LogParser User : aromedia — Tue, 07 Nov 2006 12:51:00 GMT

And you have to have dynamic pages, because IIS f.e. does not log the session cookie in case of an .HTM(L) file. If the same user visits an ASP page too then it is no problem, but if your website is mainly static pages.....

Cees

RE: PageViews and Unique are ok, but how do I calculate visits?

LogParser User : DEinspanjer — Tue, 07 Nov 2006 12:34:00 GMT

I will go back on my prior comments and say that if you have a session cookie stored in the logs that you can group by that in LP and get fair sessionization from that. Of course, it will still have holes for people who leave their browser open all day and people who have cookies turned off, but those are the trade-offs.

RE: PageViews and Unique are ok, but how do I calculate visits?

LogParser User : aromedia — Tue, 07 Nov 2006 11:49:00 GMT

I did think about looking at AWStats, but the first glimpse learned that it is not as flexible as Logparser is. That's why I love it, I just output a number, add it to an HTML table, throw in the company logo and export it to PDF. My manager loves me for it!!!

Thanks for the reply Daniel.

Cees