<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://forums.iis.net/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:cs="http://blogs.iis.net/"><channel><title>Search results matching tag 'logparser'</title><link>http://forums.iis.net/search/SearchResults.aspx?o=DateDescending&amp;tag=logparser&amp;orTags=0</link><description>Search results matching tag 'logparser'</description><dc:language>en-US</dc:language><generator>CommunityServer 2007 SP1 (Build: 20510.895)</generator><item><title>Prining</title><link>http://forums.iis.net/p/1162008/1921810.aspx#1921810</link><pubDate>Thu, 22 Oct 2009 21:50:45 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1921810</guid><dc:creator>hg363</dc:creator><cs:applicationKey>input_formats-51</cs:applicationKey><description>&lt;p&gt;Hi to all forum members.&lt;/p&gt;
&lt;p&gt;Is there an SQL script in existance or can one be configured that when executed with Log Parser would show which printers a client printed to from a MS Windows XP Pro PC?&lt;/p&gt;
&lt;p&gt;And if this&amp;nbsp;is possible can the script then be inflated to show&amp;nbsp;what dates&amp;nbsp;the print jobs were sent to the printers and if possible the print job name and how many pages?&lt;/p&gt;
&lt;p&gt;If some one could kindly show me how this can be done, it would be most helpful, regards HG363 UK London &amp;nbsp;&lt;/p&gt;
&lt;p&gt;&amp;nbsp;&lt;/p&gt;</description></item><item><title>How do you convert date format from dd/mm/yyyy to yyMMdd?</title><link>http://forums.iis.net/p/1161980/1921661.aspx#1921661</link><pubDate>Thu, 22 Oct 2009 08:42:46 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1921661</guid><dc:creator>thaichi23</dc:creator><cs:applicationKey>advanced_topics-51</cs:applicationKey><description>&lt;p&gt;Hello all,&lt;/p&gt;
&lt;p&gt;I have my&amp;nbsp;IIS to record daily so the log name is ex091022.log.&amp;nbsp; I want logparser to&amp;nbsp;find the log that has the current date similar to &amp;quot;select * from ex%date%.log&amp;quot;&lt;/p&gt;
&lt;p&gt;The only problem is that %date% returns 10/22/09 and that will not automatically grab the right log. I want to grab the date in the yyMMdd format.&amp;nbsp; Is this possible?&lt;/p&gt;
&lt;p&gt;&amp;nbsp;My logparser statement works great but this is the only problem.&amp;nbsp; I am going to save the logparser query as a .bat file and let task schedular run this everday at a certain time so that way it automatically grabs the current date&amp;#39;s log and slaps it into SQL.&amp;nbsp; &lt;/p&gt;</description></item><item><title>Merge two outputs</title><link>http://forums.iis.net/p/1161919/1921397.aspx#1921397</link><pubDate>Tue, 20 Oct 2009 16:46:31 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1921397</guid><dc:creator>saturno</dc:creator><cs:applicationKey>general_discussion-51</cs:applicationKey><description>&lt;p&gt;Hi everyone,&lt;/p&gt;
&lt;p&gt;&amp;nbsp;I have two LP queries that return different results from the same origin.&lt;/p&gt;
&lt;p&gt;One output&amp;#39;s a 3d exploded pie chart, and a second that return a table with 4 columns with a sumarized result of a second query.&lt;/p&gt;
&lt;p&gt;How can I run this both (separate)&amp;nbsp;queries keeping in mind that the result should be (for example) just one html page? (chart on top, and data below).&lt;/p&gt;
&lt;p&gt;I also would like to embed in the output the LogParser statistics presented in the end of processing: &lt;/p&gt;
&lt;p&gt;Elements processed: &lt;/p&gt;
&lt;p&gt;Elements output:&lt;/p&gt;
&lt;p&gt;Execution time:&lt;/p&gt;
&lt;p&gt;How can I achieve this?&lt;/p&gt;
&lt;p&gt;P.S.: I have the Logparser Toolkit (Syngress), and altough it is quite extensive, I didn&amp;#39;t found the answer for this questions...&lt;/p&gt;</description></item><item><title>How to query IIS log entries logged in the past N minutes?</title><link>http://forums.iis.net/p/1161100/1917830.aspx#1917830</link><pubDate>Tue, 22 Sep 2009 17:28:58 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1917830</guid><dc:creator>ApexIT</dc:creator><cs:applicationKey>general_discussion-51</cs:applicationKey><description>&lt;p&gt;&amp;nbsp;Host in located in EDT and IISW3C logs are logging to GMT.&lt;/p&gt;&lt;p&gt;&amp;nbsp;I found the example for EVT logs in logparser help, e.g.:&lt;/p&gt;&lt;pre class="prettyprint"&gt;&lt;code&gt;&lt;span class="pun"&gt;&amp;gt;&lt;/span&gt;&lt;span class="pln"&gt;logparser &lt;/span&gt;&lt;span class="str"&gt;&amp;quot;SELECT * FROM Application WHERE TimeGenerated &amp;gt;= TO_LOCALTIME( SUB( SYSTEM_TIMESTAMP(), TIMESTAMP( &amp;#39;20&amp;#39;, &amp;#39;mm&amp;#39; ) ) )&amp;quot;&lt;/span&gt;&lt;span class="pln"&gt;&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;&lt;pre class="prettyprint"&gt;&amp;nbsp;&lt;/pre&gt;&lt;pre class="prettyprint"&gt;How can I retrieve IISW3C entries from the last N minutes?&lt;/pre&gt;&lt;pre class="prettyprint"&gt;&amp;nbsp;&lt;/pre&gt;&lt;pre class="prettyprint"&gt;&amp;nbsp;&lt;/pre&gt;&lt;pre class="prettyprint"&gt;&amp;nbsp;&lt;/pre&gt;&lt;p&gt;&amp;nbsp;&lt;/p&gt;</description></item><item><title>Does Logparser support manifest-based provider?</title><link>http://forums.iis.net/p/1159314/1910594.aspx#1910594</link><pubDate>Thu, 16 Jul 2009 22:04:35 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1910594</guid><dc:creator>hengyi</dc:creator><cs:applicationKey>general_discussion-51</cs:applicationKey><description>&lt;p&gt;I&amp;#39;m using the manifest-based provider to write the ETW messages. When I use logparser to load the .etl file, it throws the error &amp;quot;Error: Cannot find provider of event {guid}&amp;quot;. But the provider is&amp;nbsp;registered&amp;nbsp;and I can use Event Viewer to see these messages. Does Logparser support manifest-based provider?&lt;/p&gt;
&lt;p&gt;Since I&amp;#39;m using x64 Windows 20008,&amp;nbsp;could it also because&amp;nbsp;32-bit Logparser&amp;nbsp;can&amp;#39;t find the 64-bit provider? Is there a 64-bit version of Logparser?&lt;/p&gt;
&lt;p&gt;&amp;nbsp;&lt;/p&gt;</description></item><item><title>iCheckpoint in code</title><link>http://forums.iis.net/p/1158702/1908101.aspx#1908101</link><pubDate>Wed, 24 Jun 2009 13:33:03 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1908101</guid><dc:creator>Hopefully</dc:creator><cs:applicationKey>iis7_-_extensibility--1</cs:applicationKey><description>&lt;p&gt;Howdy,&lt;/p&gt;&amp;nbsp; I am writing a little number to alert me of heavy hits to my web server.&amp;nbsp; I&amp;#39;m using vb.net and the &lt;font size="2"&gt;COMIISW3CInputContextClass class to do it.&amp;nbsp; I was wondering, could anyone help me figure out how to get a iCheckpoint put into the code so it checks from the last spot reported on in the web log?&amp;nbsp; Here is what I have...Thanks!&lt;/font&gt;&lt;font size="2"&gt;&lt;font size="2"&gt; 
&lt;p&gt;&lt;/font&gt;&lt;font color="#0000ff" size="2"&gt;&lt;font color="#0000ff" size="2"&gt;Dim&lt;/font&gt;&lt;/font&gt;&lt;font size="2"&gt; oLogQuery &lt;/font&gt;&lt;font color="#0000ff" size="2"&gt;&lt;font color="#0000ff" size="2"&gt;As&lt;/font&gt;&lt;/font&gt;&lt;font size="2"&gt; &lt;/font&gt;&lt;font color="#0000ff" size="2"&gt;&lt;font color="#0000ff" size="2"&gt;New&lt;/font&gt;&lt;/font&gt;&lt;font size="2"&gt; MSUtil.LogQueryClass&lt;br /&gt;&lt;/font&gt;&lt;font color="#0000ff" size="2"&gt;&lt;font color="#0000ff" size="2"&gt;Dim&lt;/font&gt;&lt;/font&gt;&lt;font size="2"&gt; myInputFormat &lt;/font&gt;&lt;font color="#0000ff" size="2"&gt;&lt;font color="#0000ff" size="2"&gt;As&lt;/font&gt;&lt;/font&gt;&lt;font size="2"&gt; &lt;/font&gt;&lt;font color="#0000ff" size="2"&gt;&lt;font color="#0000ff" size="2"&gt;New&lt;/font&gt;&lt;/font&gt;&lt;font size="2"&gt; MSUtil.COMIISW3CInputContextClass&lt;br /&gt;&lt;/font&gt;&lt;font color="#0000ff" size="2"&gt;&lt;font color="#0000ff" size="2"&gt;Dim&lt;/font&gt;&lt;/font&gt;&lt;font size="2"&gt; myOutputFormat &lt;/font&gt;&lt;font color="#0000ff" size="2"&gt;&lt;font color="#0000ff" size="2"&gt;As&lt;/font&gt;&lt;/font&gt;&lt;font size="2"&gt; &lt;/font&gt;&lt;font color="#0000ff" size="2"&gt;&lt;font color="#0000ff" size="2"&gt;New&lt;/font&gt;&lt;/font&gt;&lt;font size="2"&gt; MSUtil.COMChartOutputContextClass&lt;br /&gt;&lt;/font&gt;&lt;font color="#008000" size="2"&gt;&lt;font color="#008000" size="2"&gt;&amp;#39; Create the query&lt;br /&gt;&lt;/font&gt;&lt;/font&gt;&lt;font color="#0000ff" size="2"&gt;&lt;font color="#0000ff" size="2"&gt;Dim&lt;/font&gt;&lt;/font&gt;&lt;font size="2"&gt; getTheTopHitters &lt;/font&gt;&lt;font color="#0000ff" size="2"&gt;&lt;font color="#0000ff" size="2"&gt;As&lt;/font&gt;&lt;/font&gt;&lt;font size="2"&gt; &lt;/font&gt;&lt;font color="#0000ff" size="2"&gt;&lt;font color="#0000ff" size="2"&gt;String&lt;/font&gt;&lt;/font&gt;&lt;font size="2"&gt; = &lt;/font&gt;&lt;font color="#a31515" size="2"&gt;&lt;font color="#a31515" size="2"&gt;&amp;quot;SELECT TOP 10 c-ip as heavyhitters, COUNT(*) AS Hits FROM &amp;#39;&amp;quot;&lt;/font&gt;&lt;/font&gt;&lt;font size="2"&gt; &amp;amp; myFilePath &amp;amp; &lt;/font&gt;&lt;font color="#a31515" size="2"&gt;&lt;font color="#a31515" size="2"&gt;&amp;quot;\*.*&amp;#39; GROUP BY heavyhitters ORDER BY Hits DESC&amp;quot;&lt;br /&gt;&lt;/font&gt;&lt;/font&gt;&lt;font color="#008000" size="2"&gt;&lt;font color="#008000" size="2"&gt;&amp;#39; Execute the query&lt;br /&gt;&lt;/font&gt;&lt;/font&gt;&lt;font color="#0000ff" size="2"&gt;&lt;font color="#0000ff" size="2"&gt;Dim&lt;/font&gt;&lt;/font&gt;&lt;font size="2"&gt; oRecordSet &lt;/font&gt;&lt;font color="#0000ff" size="2"&gt;&lt;font color="#0000ff" size="2"&gt;As&lt;/font&gt;&lt;/font&gt;&lt;font size="2"&gt; MSUtil.ILogRecordset = oLogQuery.Execute(getTheTopHitters, myInputFormat)&lt;/p&gt;&lt;/font&gt;&lt;/font&gt;</description></item><item><title>Early Binding in VB6/VBA</title><link>http://forums.iis.net/p/1158006/1905203.aspx#1905203</link><pubDate>Fri, 29 May 2009 21:16:49 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1905203</guid><dc:creator>Oorang</dc:creator><cs:applicationKey>general_discussion-51</cs:applicationKey><description>&lt;p&gt;&amp;nbsp;I am trying to set a reference to the logparser.dll (C:\Program Files\Log Parser 2.2\LogParser.dll), and when I do, the IDE closes the browse window without an error. But no reference is set. The net effect is that I can&amp;#39;t make this work with early binding?&lt;br /&gt;&lt;/p&gt;</description></item><item><title>Parse a text file with &amp;quot;|&amp;quot; as  field delimiter and &amp;quot;^&amp;quot; as record delimiter</title><link>http://forums.iis.net/p/1157461/1903019.aspx#1903019</link><pubDate>Thu, 07 May 2009 14:48:48 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1903019</guid><dc:creator>albertop</dc:creator><cs:applicationKey>input_formats-51</cs:applicationKey><description>&lt;p&gt;Hi, &lt;/p&gt;
&lt;p&gt;Is it possible to parse a text file which is basically a CSV file but it has &amp;quot;|&amp;quot; as field delimiter and &amp;quot;^&amp;quot; as record delimiter?&lt;/p&gt;
&lt;p&gt;Example:&lt;/p&gt;
&lt;p&gt;This is field 1|This is field 2|This is field 3^&lt;br /&gt;This is field 1|This is field 2|This is field 3^&lt;br /&gt;&lt;br /&gt;If yes, how?&lt;/p&gt;
&lt;p&gt;Regards,&lt;/p&gt;
&lt;p&gt;Alberto.&lt;/p&gt;</description></item><item><title>Logparser 2.2</title><link>http://forums.iis.net/p/1157198/1901996.aspx#1901996</link><pubDate>Mon, 27 Apr 2009 15:12:52 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1901996</guid><dc:creator>rlawson</dc:creator><cs:applicationKey>input_formats-51</cs:applicationKey><description>&lt;p&gt;If logparser 2.2 compatible with windows 2008/64bit? to see security .evt logs&lt;/p&gt;
&lt;p&gt;I I am using logparser 2.2 and it was working perfect until the domain controllers were upgraded to windows 2008 64bit, now I get a file is corrupt.&lt;/p&gt;
&lt;p&gt;Need help&lt;/p&gt;
&lt;p&gt;&amp;nbsp;Thanks&lt;/p&gt;
&lt;p&gt;&amp;nbsp;&lt;/p&gt;
&lt;p&gt;&amp;nbsp;&lt;/p&gt;</description></item><item><title>Complete newbie question: Parse multiple logs in multiple subfolders...</title><link>http://forums.iis.net/p/1157047/1901349.aspx#1901349</link><pubDate>Tue, 21 Apr 2009 15:01:36 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1901349</guid><dc:creator>solojer</dc:creator><cs:applicationKey>general_discussion-51</cs:applicationKey><description>I&amp;#39;m trying to figure out how to form the FROM when I have multiple log files in multiple subfolders, such as:

C:\LogFolder\
C:\LogFolder\Log1\*
C:\LogFolder\Log2\*
C:\LogFolder\Log3\*
etc..

If I use...

SELECT * FROM C:\LogFolder\*

... it doesn&amp;#39;t seem to search all subfolders... ?

Thanks for your attention to this!</description></item></channel></rss>