<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://forums.iis.net/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:cs="http://blogs.iis.net/"><channel><title>Search results matching tag 'W3C input format'</title><link>http://forums.iis.net/search/SearchResults.aspx?o=DateDescending&amp;tag=W3C+input+format&amp;orTags=0</link><description>Search results matching tag 'W3C input format'</description><dc:language>en-US</dc:language><generator>CommunityServer 2007 SP1 (Build: 20510.895)</generator><item><title>Re: can i create leading zeros?</title><link>http://forums.iis.net/p/1147539/1862027.aspx#1862027</link><pubDate>Thu, 17 Jan 2008 14:20:32 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1862027</guid><dc:creator>squadjot</dc:creator><cs:applicationKey>input_formats-51</cs:applicationKey><description>&lt;p&gt;Yes, I know that, it was more how syntax-wise to make the IF statement.. i&amp;#39;m not sure how exactly to put it up.&lt;br /&gt;It must be something about asking how long the string is (of number), and accordingly adding needed zeros..&lt;/p&gt;&lt;p&gt;&amp;nbsp;&lt;br /&gt;It&amp;#39;s more like..&amp;nbsp; how? :)&lt;br /&gt;&lt;/p&gt;</description></item><item><title>RE: counting only highest value per i.e user</title><link>http://forums.iis.net/p/1145954/1855129.aspx#1855129</link><pubDate>Mon, 02 Apr 2007 16:24:00 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1855129</guid><dc:creator>LogParser User : squadjot</dc:creator><cs:applicationKey>input_formats-51</cs:applicationKey><description>&lt;P&gt;Okei, thanks for the verification =), i think this is really close to&amp;nbsp;the best way i can get it.. &lt;/P&gt;&lt;P&gt;The only thing what would make it even greater, was if i could somehow make further grouping by TitleID.. &lt;BR&gt;I've once done it by mistake (other query example).. .but it, like, created several "outputtables" in one output.. if you know what i mean. (or is it what youre trying to tell me, that i can learn more about readuing up on the aggregate stuff =) )&lt;/P&gt;&lt;P&gt;It's not necesary really.. cause all the data i'm&amp;nbsp;filtering out here´are supposed to be parsed, once again, by 3rd party program.. but offcourse, the more "clean" i&amp;nbsp;can get it the better.. &lt;/P&gt;&lt;P&gt;I'll probably figure it out..&amp;nbsp;i&amp;nbsp;just love this little program &lt;img src='images/emotions/biggrin.gif' height='20' width='20' border='0' title='Big Grin' align='absmiddle'&gt; , and i'm kinda&amp;nbsp;forced to fiddle with it , as i'm responsible for &amp;nbsp;building this crazy stats project from scratch.&lt;/P&gt;&lt;P&gt;Thanks again Daniel Einspanjer, hope you'll pop by the W3C again later on...i BET i will have some questions for you =) &amp;lt;3&lt;/P&gt;</description></item><item><title>RE: counting only highest value per i.e user</title><link>http://forums.iis.net/p/1145954/1855127.aspx#1855127</link><pubDate>Mon, 02 Apr 2007 12:01:00 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1855127</guid><dc:creator>LogParser User : DEinspanjer</dc:creator><cs:applicationKey>input_formats-51</cs:applicationKey><description>Yes, that is exactly what I would have suggested to you.&lt;br&gt;For further education, read the part of the help file on Aggregate Functions.&lt;br&gt;&lt;br&gt;When you group your results in a GROUP BY, any fields that are not part of the group by can be displayed by using aggregate functions to "sum them up".  </description></item><item><title>counting only highest value per i.e user</title><link>http://forums.iis.net/p/1145954/1851166.aspx#1851166</link><pubDate>Sun, 01 Apr 2007 13:33:00 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1851166</guid><dc:creator>LogParser User : squadjot</dc:creator><cs:applicationKey>input_formats-51</cs:applicationKey><description>&lt;P&gt;Hi guys, i'm having a little trouble with this one... &lt;/P&gt;&lt;P&gt;To get it right , i think i have explain&amp;nbsp;my&amp;nbsp;case properly.&lt;/P&gt;&lt;P&gt;I need to find out how much time users are spending on specific pages, and due to technical issues on the frontend, the webapplication will send a time-"tick" every 10 secs or so.. I want only&amp;nbsp;to collect the highest amount of time a user has been on a specific page (in one "session". So lets say the person visits the page .. but is only there for 30 secs..then he later visits same page.. but uses&amp;nbsp;220&amp;nbsp;secs on the page..&amp;nbsp; then i want only to use that last record ( the 220 secs), and i dont care about the 30 secs in the first visit.&lt;/P&gt;&lt;P&gt;IMPORTANT the defiition of old/new session is determined by the session variable , not by the&amp;nbsp;log timestamps.., and im not even sure sessionID needs to come into play in&amp;nbsp;this particular case, cause all i really&amp;nbsp;want do ..is simply get the highest number from "lastTime"-variable per&amp;nbsp;user &amp;gt; per title...&amp;nbsp; right? (i'm asking cause i already confused my self, lol)..&amp;nbsp;&amp;nbsp;&lt;/P&gt;&lt;P&gt;again im doing it all with custom written variables, used in&amp;nbsp;the uri-query string.&amp;nbsp;Some strings could look like this&lt;/P&gt;&lt;P&gt;titleID=TheBlackHorse&amp;amp;userID=EziRida87&amp;amp;sessionID=9876513&amp;amp;lastTime=30&amp;amp;r=etcetcetc&lt;BR&gt;titleID=TheBlackHorse&amp;amp;userID=EziRida87&amp;amp;sessionID=9876513&amp;amp;lastTime=40&amp;amp;r=etcetcetc&lt;BR&gt;titleID=TheBlackHorse&amp;amp;userID=EziRida87&amp;amp;sessionID=9956321&amp;amp;lastTime=&lt;FONT color=#11dd11&gt;80&lt;/FONT&gt;&amp;amp;r=etcetcetc&lt;BR&gt;titleID=TheGoldenShoe&amp;amp;userID=Petra&amp;amp;sessionID=36478421&amp;amp;lastTime=50&amp;amp;r=etcetcetc&lt;BR&gt;titleID=TheGoldenShoe&amp;amp;userID=Petra&amp;amp;sessionID=58478421&amp;amp;lastTime=&lt;FONT color=#11dd11&gt;60&lt;/FONT&gt;&amp;amp;r=etcetcetc&lt;BR&gt;titleID=TheGoldenShoe&amp;amp;userID=Petra&amp;amp;sessionID=6478421&amp;amp;lastTime=50&amp;amp;r=etcetcetc&lt;BR&gt;titleID=TheGoldenShoe&amp;amp;userID=EziRida87&amp;amp;sessionID=978421&amp;amp;lastTime=&lt;FONT color=#11dd11&gt;30&lt;/FONT&gt;&amp;amp;r=etcetcetc&lt;/P&gt;&lt;P&gt;Even the output i'm not sure how to declare, i'm wondering if i have to do a query per title, cause i guess i would have to have each visiter listed, with their hiest number from lastTime&lt;/P&gt;&lt;P&gt;Title&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; User&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;Timespend&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &lt;BR&gt;--------------&amp;nbsp; ------------&amp;nbsp;&amp;nbsp; ----------------&lt;BR&gt;TheBlackHorse&amp;nbsp;&amp;nbsp;&amp;nbsp; EziRida87&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 80&lt;BR&gt;TheGoldenShoe&amp;nbsp;&amp;nbsp; Petra&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 60&lt;BR&gt;TheGoldenShoe&amp;nbsp;&amp;nbsp; EziRida87&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 30&lt;/P&gt;&lt;P&gt;If this is the smartest way of outputting it.. &amp;nbsp;i dont know either.. (cause in the end..its all about per title..really)&lt;/P&gt;&lt;P&gt;edit: And maybe even easier, would be to&amp;nbsp; let LogParser create a whole new set of filtered&amp;nbsp;W3C files, with only the highest visit numbers (seconds)..and then run querys on those?&lt;/P&gt;&lt;P&gt;Still i need help on the &amp;lt;use only highest number&amp;gt; / &amp;lt;user&amp;gt; &lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;edit again: I found something in the Help file about MAX(Size) function., i guess this is the one i have to implement somehow.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;edit again again =).. oke..made major progress now:&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;SELECT&amp;nbsp; &lt;BR&gt;EXTRACT_VALUE(cs-uri-query, 'titleID') AS TitleID,&lt;BR&gt;TO_LOWERCASE(EXTRACT_VALUE(cs-uri-query, 'userID')) AS User,&lt;BR&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; MAX(TO_INT(EXTRACT_VALUE(cs-uri-query, 'lastTime'))) as TimeSpend&lt;BR&gt;FROM G:/testlog/*.log&lt;BR&gt;GROUP BY User, TitleID&lt;BR&gt;&lt;BR&gt;when running this on theese lines&lt;/P&gt;&lt;P&gt;&lt;FONT size=1&gt;#Software: Microsoft Internet Information Services 6.0&lt;BR&gt;#Version: 1.0&lt;BR&gt;#Date: 2007-03-05 00:01:18&lt;BR&gt;#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) cs-host sc-status sc-substatus sc-win32-status &lt;BR&gt;2007-03-05 00:22:08 W3SVC0123456789 DMZ-WTF01 192.123.4.56 GET /Stats/hit.aspx &lt;FONT color=#dd3333&gt;titleID=TheBlackHorse&amp;amp;userID=EziRida87&amp;amp;sessionID=9876513&amp;amp;lastTime=30&lt;/FONT&gt;&amp;amp;s=http://gofurself.com/mediafiles/3/flash/hannibal_728x90.asp?clickTAG=.%2Findex.asp%3Fmod%3Dbanner%26id%3D17|||728x90||| 80 - 72.88.135.75 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) &lt;/FONT&gt;&lt;a target=_blank href="http://futoo.dk/Stats/s.asp" target=_blank&gt;&lt;FONT size=1&gt;http://futoo.dk/Stats/s.asp&lt;/FONT&gt;&lt;/A&gt;&lt;FONT size=1&gt; futoo.dk 200 0 0&lt;BR&gt;2007-03-05 00:22:08 W3SVC0123456789 DMZ-WTF01 192.123.4.56 GET /Stats/hit.aspx &lt;FONT color=#dd3333&gt;titleID=TheBlackHorse&amp;amp;userID=EziRida87&amp;amp;sessionID=9876513&amp;amp;lastTime=40&lt;/FONT&gt;&amp;amp;s=http://gofurself.com/mediafiles/3/flash/hannibal_728x90.asp?clickTAG=.%2Findex.asp%3Fmod%3Dbanner%26id%3D17|||728x90||| 80 - 72.88.135.75 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) &lt;/FONT&gt;&lt;a target=_blank href="http://futoo.dk/Stats/s.asp" target=_blank&gt;&lt;FONT size=1&gt;http://futoo.dk/Stats/s.asp&lt;/FONT&gt;&lt;/A&gt;&lt;FONT size=1&gt; futoo.dk 200 0 0&lt;BR&gt;2007-03-05 00:22:08 W3SVC0123456789 DMZ-WTF01 192.123.4.56 GET /Stats/hit.aspx &lt;FONT color=#dd3333&gt;titleID=TheBlackHorse&amp;amp;userID=EziRida87&amp;amp;sessionID=9876513&amp;amp;lastTime=50&lt;/FONT&gt;&amp;amp;s=http://gofurself.com/mediafiles/3/flash/hannibal_728x90.asp?clickTAG=.%2Findex.asp%3Fmod%3Dbanner%26id%3D17|||728x90||| 80 - 72.88.135.75 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) &lt;/FONT&gt;&lt;a target=_blank href="http://futoo.dk/Stats/s.asp" target=_blank&gt;&lt;FONT size=1&gt;http://futoo.dk/Stats/s.asp&lt;/FONT&gt;&lt;/A&gt;&lt;FONT size=1&gt; futoo.dk 200 0 0&lt;BR&gt;2007-03-05 00:22:08 W3SVC0123456789 DMZ-WTF01 192.123.4.56 GET /Stats/hit.aspx &lt;FONT color=#dd3333&gt;titleID=TheBlackHorse&amp;amp;userID=Petra&amp;amp;sessionID=9876513&amp;amp;lastTime=50&lt;/FONT&gt;&amp;amp;s=http://gofurself.com/mediafiles/3/flash/hannibal_728x90.asp?clickTAG=.%2Findex.asp%3Fmod%3Dbanner%26id%3D17|||728x90||| 80 - 72.88.135.75 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) &lt;/FONT&gt;&lt;a target=_blank href="http://futoo.dk/Stats/s.asp" target=_blank&gt;&lt;FONT size=1&gt;http://futoo.dk/Stats/s.asp&lt;/FONT&gt;&lt;/A&gt;&lt;FONT size=1&gt; futoo.dk 200 0 0&lt;BR&gt;2007-03-05 00:22:08 W3SVC0123456789 DMZ-WTF01 192.123.4.56 GET /Stats/hit.aspx &lt;FONT color=#dd3333&gt;titleID=TheBlackHorse&amp;amp;userID=Petra&amp;amp;sessionID=9876513&amp;amp;lastTime=60&lt;/FONT&gt;&amp;amp;s=http://gofurself.com/mediafiles/3/flash/hannibal_728x90.asp?clickTAG=.%2Findex.asp%3Fmod%3Dbanner%26id%3D17|||728x90||| 80 - 72.88.135.75 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) &lt;/FONT&gt;&lt;a target=_blank href="http://futoo.dk/Stats/s.asp" target=_blank&gt;&lt;FONT size=1&gt;http://futoo.dk/Stats/s.asp&lt;/FONT&gt;&lt;/A&gt;&lt;FONT size=1&gt; futoo.dk 200 0 0&lt;BR&gt;2007-03-05 00:22:08 W3SVC0123456789 DMZ-WTF01 192.123.4.56 GET /Stats/hit.aspx &lt;FONT color=#dd3333&gt;titleID=TheBlackHorse&amp;amp;userID=Petra&amp;amp;sessionID=9876513&amp;amp;lastTime=20&lt;/FONT&gt;&amp;amp;s=http://gofurself.com/mediafiles/3/flash/hannibal_728x90.asp?clickTAG=.%2Findex.asp%3Fmod%3Dbanner%26id%3D17|||728x90||| 80 - 72.88.135.75 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) &lt;/FONT&gt;&lt;a target=_blank href="http://futoo.dk/Stats/s.asp" target=_blank&gt;&lt;FONT size=1&gt;http://futoo.dk/Stats/s.asp&lt;/FONT&gt;&lt;/A&gt;&lt;FONT size=1&gt; futoo.dk 200 0 0&lt;BR&gt;2007-03-05 00:22:08 W3SVC0123456789 DMZ-WTF01 192.123.4.56 GET /Stats/hit.aspx &lt;FONT color=#dd3333&gt;titleID=TheGoldenShoe&amp;amp;userID=Petra&amp;amp;sessionID=9876513&amp;amp;lastTime=80&lt;/FONT&gt;&amp;amp;s=http://gofurself.com/mediafiles/3/flash/hannibal_728x90.asp?clickTAG=.%2Findex.asp%3Fmod%3Dbanner%26id%3D17|||728x90||| 80 - 72.88.135.75 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) &lt;/FONT&gt;&lt;a target=_blank href="http://futoo.dk/Stats/s.asp" target=_blank&gt;&lt;FONT size=1&gt;http://futoo.dk/Stats/s.asp&lt;/FONT&gt;&lt;/A&gt;&lt;FONT size=1&gt; futoo.dk 200 0 0&lt;BR&gt;2007-03-05 00:22:08 W3SVC0123456789 DMZ-WTF01 192.123.4.56 GET /Stats/hit.aspx &lt;FONT color=#dd3333&gt;titleID=TheGoldenShoe&amp;amp;userID=EziRida87&amp;amp;sessionID=9876513&amp;amp;lastTime=20&lt;/FONT&gt;&amp;amp;s=http://gofurself.com/mediafiles/3/flash/hannibal_728x90.asp?clickTAG=.%2Findex.asp%3Fmod%3Dbanner%26id%3D17|||728x90||| 80 - 72.88.135.75 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) &lt;/FONT&gt;&lt;a target=_blank href="http://futoo.dk/Stats/s.asp" target=_blank&gt;&lt;FONT size=1&gt;http://futoo.dk/Stats/s.asp&lt;/FONT&gt;&lt;/A&gt;&lt;FONT size=1&gt; futoo.dk 200 0 0&lt;BR&gt;2007-03-05 00:22:08 W3SVC0123456789 DMZ-WTF01 192.123.4.56 GET /Stats/hit.aspx &lt;FONT color=#dd3333&gt;titleID=TheGoldenShoe&amp;amp;userID=EziRida87&amp;amp;sessionID=9276513&amp;amp;lastTime=30&lt;/FONT&gt;&amp;amp;s=http://gofurself.com/mediafiles/3/flash/hannibal_728x90.asp?clickTAG=.%2Findex.asp%3Fmod%3Dbanner%26id%3D17|||728x90||| 80 - 72.88.135.75 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) &lt;a target=_blank href="http://futoo.dk/Stats/s.asp" target=_blank&gt;&lt;FONT size=1&gt;http://futoo.dk/Stats/s.asp&lt;/FONT&gt;&lt;/A&gt;&lt;FONT size=1&gt; futoo.dk 200 0 0&lt;BR&gt;&lt;/FONT&gt;&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;then it gives me:&lt;/P&gt;&lt;P&gt;TitleID&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; User&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; TimeSpend&lt;/P&gt;&lt;P&gt;TheBlackHorse&amp;nbsp;&amp;nbsp;&amp;nbsp; ezirida87&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;nbsp;50&lt;BR&gt;TheBlackHorse&amp;nbsp;&amp;nbsp;&amp;nbsp; petra&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;nbsp;60&lt;BR&gt;TheGoldenShoe&amp;nbsp;&amp;nbsp; petra&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;nbsp;80&lt;BR&gt;TheGoldenShoe&amp;nbsp;&amp;nbsp; ezirida87&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;nbsp;30&lt;/P&gt;&lt;P&gt;which is actaully what i want.. i think/hope i'm not missing something, im still concidering myself newbie in this stuff...so if someone can verify or tip me if i could do something better&lt;BR&gt;Any comment apreciated =)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description></item><item><title>RE: Trying to run an sql query with a sub-query, however log parser won't run it.</title><link>http://forums.iis.net/p/1145969/1855103.aspx#1855103</link><pubDate>Fri, 23 Mar 2007 19:35:00 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1855103</guid><dc:creator>LogParser User : DEinspanjer</dc:creator><cs:applicationKey>input_formats-51</cs:applicationKey><description>Yes, LP doesn&amp;#39;t support that type of sub-query.&lt;br /&gt;You&amp;#39;ll have to do it in two passes.</description></item><item><title>Trying to run an sql query with a sub-query, however log parser won't run it.</title><link>http://forums.iis.net/p/1145969/1851181.aspx#1851181</link><pubDate>Fri, 23 Mar 2007 16:07:00 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1851181</guid><dc:creator>LogParser User : Darren</dc:creator><cs:applicationKey>input_formats-51</cs:applicationKey><description>Hello,&lt;br&gt;&lt;br&gt;I'm trying to extract the unique users using Windows Mobile devices. However the below sql statement isn't working in the logparser GUI. Does anyone know what is wrong with this query?&lt;br&gt;&lt;br&gt;Select Count(*) &lt;br&gt;From (Select cs(User-Agent), cs-username FROM  'c:\ex070322.log' where cs(User-Agent) like 'MSFT%' group by cs(User-Agent), cs-username)</description></item><item><title>RE: Problem with dates comparison, I need help please!</title><link>http://forums.iis.net/p/1145926/1855104.aspx#1855104</link><pubDate>Mon, 26 Feb 2007 21:56:00 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1855104</guid><dc:creator>LogParser User : juasebsto</dc:creator><cs:applicationKey>input_formats-51</cs:applicationKey><description>[QUOTE User="LogParser User : juasebsto"]Quote: Hey.. i dont tknow if this is what u need, but it works for me:&amp;nbsp;  &amp;nbsp;WHERE date &amp;gt;= TIMESTAMP( '2006-09-28 00:00:00', 'yyyy-MM-dd hh:mm:ss' ) &amp;nbsp;AND date &amp;lt;= TIMESTAMP( '2006-10-28 00:0...[/QUOTE] &lt;br /&gt;&lt;P&gt;Hi there,&lt;/P&gt;&lt;P&gt;Thanks very much for your answers. You may be think I'm crazy but I resolved it with the following script:&lt;/P&gt;&lt;FONT color=#800000 size=2&gt;&lt;P&gt;TO_TIMESTAMP(TO_STRING(STRCAT(STRCAT(STRCAT(STRCAT(SUBSTR(Date,0,4),'-'),REPLACE_CHR(SUBSTR(Date,5,2),'-','')),'-'),REPLACE_CHR(SUBSTR(Date,7,ADD(STRLEN(Date),-7)),'-',''))),'yyyy-M-d') &amp;gt; TIMESTAMP('"&lt;/FONT&gt;&lt;FONT size=2&gt; + DateLastItem + &lt;/FONT&gt;&lt;FONT color=#800000 size=2&gt;"','yyyy-M-d') &lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT color=#800000 size=2&gt;OR &lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT color=#800000 size=2&gt;( (TO_TIMESTAMP(TO_STRING(STRCAT(STRCAT(STRCAT(STRCAT(SUBSTR(Date,0,4),'-'),REPLACE_CHR(SUBSTR(Date,5,2),'-','')),'-'),REPLACE_CHR(SUBSTR(Date,7,ADD(STRLEN(Date),-7)),'-',''))),'yyyy-M-d') = TIMESTAMP('"&lt;/FONT&gt;&lt;FONT size=2&gt; + DateLastItem + &lt;/FONT&gt;&lt;FONT color=#800000 size=2&gt;"','yyyy-M-d')) &lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT color=#800000 size=2&gt;AND &lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT color=#800000 size=2&gt;(TO_TIMESTAMP(REPLACE_STR(REPLACE_CHR(Time,' ',''),'GMT',''),'h:m:s') &amp;gt;= TIMESTAMP('"&lt;/FONT&gt;&lt;FONT size=2&gt; + TimeLastItem + &lt;/FONT&gt;&lt;FONT color=#800000 size=2&gt;"','h:m:s')) ))&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT color=#111111 size=2&gt;I tested it with many log files and it does what I need. I found out after a while that there are some little problems when dates come&amp;nbsp;with the format yyyy-M-d even if you convert them with the CONVERT function to yyyy-MM-dd.&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT color=#111111 size=2&gt;I hope it can be useful for someone.&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT color=#800000 size=2&gt;&lt;FONT color=#111111&gt;juan!&lt;/FONT&gt;&lt;/P&gt;&lt;/FONT&gt;</description></item><item><title>RE: Problem with dates comparison, I need help please!</title><link>http://forums.iis.net/p/1145926/1855099.aspx#1855099</link><pubDate>Sat, 24 Feb 2007 21:59:00 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1855099</guid><dc:creator>LogParser User : squadjot</dc:creator><cs:applicationKey>input_formats-51</cs:applicationKey><description>&lt;P&gt;Hey.. i dont tknow if this is what u need, but it works for me:&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;WHERE date &amp;gt;= TIMESTAMP( '2006-09-28 00:00:00', 'yyyy-MM-dd hh:mm:ss' )&lt;BR&gt;&amp;nbsp;AND date &amp;lt;= TIMESTAMP( '2006-10-28 00:00:00', 'yyyy-MM-dd hh:mm:ss' )&lt;/P&gt;&lt;P&gt;Cheers&lt;/P&gt;</description></item><item><title>RE: Problem with dates comparison, I need help please!</title><link>http://forums.iis.net/p/1145926/1855097.aspx#1855097</link><pubDate>Thu, 22 Feb 2007 16:43:00 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1855097</guid><dc:creator>LogParser User : Jeff</dc:creator><cs:applicationKey>input_formats-51</cs:applicationKey><description>&lt;P&gt;this should work:&lt;/P&gt;&lt;P&gt;WHERE TO_TIMESTAMP(Date,'yyyy-MM-dd') = TO_TIMESTAMP('2007-02-10', 'yyyy-MM-dd')&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description></item><item><title>Exchange 5.5 NDRs from tracking.log</title><link>http://forums.iis.net/p/1145927/1851139.aspx#1851139</link><pubDate>Thu, 22 Feb 2007 11:54:00 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1851139</guid><dc:creator>LogParser User : david.inglis</dc:creator><cs:applicationKey>input_formats-51</cs:applicationKey><description>&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;Complete&amp;nbsp;newbie to logparser...&lt;/P&gt;&lt;P&gt;I had an exchange 5.5 site lose WAN connectivity recently.&amp;nbsp; Their inbound mail sat in the MTA queue for two days, then they all got NDR'd (something timed out i assume).&lt;/P&gt;&lt;P&gt;Now the connection is back, the users want their email!&amp;nbsp; I've told them they can't, but that I should be able to provide them with a list of what they've missed, so they can contact the relevant people and get the mails resent if necessary.&amp;nbsp; (there are only 40 or so users involved here).&lt;/P&gt;&lt;P&gt;Can anybody point me&amp;nbsp;in the right direction for a logparser query I can point at the tracking logs to retrieve this info?&amp;nbsp; eg. a list of NDR'd email between two dates?&amp;nbsp; Is this possible?&lt;/P&gt;&lt;P&gt;Thanks for any advice.&lt;/P&gt;&lt;P&gt;David&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description></item></channel></rss>