« Previous Next »

• 11-06-2008, 5:03 AM

  In reply to

  lizardlabs Joined on 12-05-2007, 6:53 AM Posts 24

  Re: New GUI tool for MS Log Parser, Log Parser Lizard Reply Contact Hi sunutha. This qwee thing I don’t understand but for previous question, you can see if LPL “Options” will work for you. Create your query in LPL and create ‘option’ in the options dialog box (ex. ROOMS with value '80cfa2f1-d863-44d2-a6b4-9ab32ae9b2ac'), so you can modify your query something like this, “select * from ... where rooms = #ROOMS#”, or something. You can change the value for your option when you’ll need a new value. You can’t pass a file with sql query to a log parser lizard. Bye. www.lizardl.com

• 11-17-2008, 9:57 PM

  In reply to

  Photo_Joe Joined on 07-20-2008, 9:58 PM Posts 6

  Re: New GUI tool for MS Log Parser, Log Parser Lizard Reply Contact I could use some help with a query. I can list all the log records that have cs-method = post and order they by cs-uri-stem then by cs-status with this query. SELECT date, time, c-ip, cs-uri-stem, cs-method, sc-status FROM c:\logs\08-08\0808.log WHERE (cs-method = 'POST') ORDER BY cs-uri-stem, sc-status But now I want to get just a count of all the records that have cs-method = post and that have a cs-status = 200 and order by cs-uri-stem Thanks Joe

• 11-17-2008, 10:03 PM

  In reply to

  Edgar the Parser Joined on 08-25-2008, 7:58 PM Denver, CO Posts 10	Re: New GUI tool for MS Log Parser, Log Parser Lizard Reply Contact Simply add (sc-status = 200) to the WHERE clause: WHERE (cs-method = 'POST') AND (sc-status = 200) You can then exclude sc-status from ORDER BY. P.E.N.

• 11-18-2008, 9:23 AM

  In reply to

  Photo_Joe Joined on 07-20-2008, 9:58 PM Posts 6	Re: New GUI tool for MS Log Parser, Log Parser Lizard Reply Contact Edgar the Parser: Simply add (sc-status = 200) to the WHERE clause: WHERE (cs-method = 'POST') AND (sc-status = 200) You can then exclude sc-status from ORDER BY. But that does not give me a count. It would just give list of all the records that matched. PhotoJoe

• 11-18-2008, 9:32 AM

  In reply to

  Rovastar Joined on 03-13-2008, 2:00 PM London, UK Posts 1,798	Re: New GUI tool for MS Log Parser, Log Parser Lizard Reply Contact  I can't remember for sure but the normal SQL command 'count' can be used. http://msdn.microsoft.com/en-us/library/ms175997.aspx   http://www.iisportal.com

• 11-18-2008, 11:33 AM

  In reply to

  Edgar the Parser Joined on 08-25-2008, 7:58 PM Denver, CO Posts 10	Re: New GUI tool for MS Log Parser, Log Parser Lizard Reply Contact Sorry, I missed that part. But as Rovastar mentioned, use the COUNT function: SELECT date, time, c-ip, cs-uri-stem, cs-method, sc-status, COUNT(*) FROM c:\logs\08-08\0808.log WHERE (cs-method = 'POST') AND (sc-status = 200) ORDER BY cs-uri-stem P.E.N.

• 11-18-2008, 12:09 PM

  In reply to

  Photo_Joe Joined on 07-20-2008, 9:58 PM Posts 6

  Re: New GUI tool for MS Log Parser, Log Parser Lizard Reply Contact Edgar the Parser: Sorry, I missed that part. But as Rovastar mentioned, use the COUNT function: SELECT date, time, c-ip, cs-uri-stem, cs-method, sc-status, COUNT(*) FROM c:\logs\08-08\0808.log WHERE (cs-method = 'POST') AND (sc-status = 200) ORDER BY cs-uri-stem I have tried this: SELECT COUNT(cs-uri-stem) FROM c:\logs\08-08\0808.log WHERE (cs-method = 'POST') AND (sc-status = 200) GROUP BY cs-uri-stem I get this as the output: Count(ALL cs-uri-stem) 1         26 2         21 Instead of the label of 1 and 2 I would like to get the label of the cs-uri-stem values like: /ReservationForm.aspx and /ContactForm.aspx.

• 11-18-2008, 1:25 PM

  In reply to

  Edgar the Parser Joined on 08-25-2008, 7:58 PM Denver, CO Posts 10	Re: New GUI tool for MS Log Parser, Log Parser Lizard Reply Contact Then the query would look like this: SELECT cs-uri-stem, cs-method, sc-status, COUNT(*)  FROM c:\logs\08-08\0808.log WHERE (cs-method = 'POST') AND (sc-status = 200) AND (cs-uri-stem = '/ReservationForm.aspx and /ContactForm.aspx')  GROUP BY cs-uri-stem  ORDER BY COUNT(*) Desc P.E.N.

• 11-18-2008, 1:30 PM

  In reply to

  Edgar the Parser Joined on 08-25-2008, 7:58 PM Denver, CO Posts 10	Re: New GUI tool for MS Log Parser, Log Parser Lizard Reply Contact Oops! Didn't notice you had two stems in your question. You will have to provide full stem, not just the page: WHERE (cs-method = 'POST') AND (sc-status = 200) AND (cs-uri-stem LIKE /...'/ReservationForm.aspx' AND /.../ContactForm.aspx') P.E.N.

• 11-18-2008, 8:01 PM

  In reply to

  Photo_Joe Joined on 07-20-2008, 9:58 PM Posts 6	Re: New GUI tool for MS Log Parser, Log Parser Lizard Reply Contact Here is the query that I have come up with that gives me the results that I was looking for. SELECT cs-uri-stem, COUNT(*) FROM c:\logs\all-08-10.log WHERE (cs-method = 'POST') AND (sc-status = 200) GROUP BY cs-uri-stem COUNT(ALL *) cs-uri-stem 30 /ReservationForm.aspx 25 /ContactForm.aspx Thanks for the help. Joe

• 11-26-2008, 10:47 AM

  In reply to

  wfg97079 Joined on 11-26-2008, 3:21 PM Posts 2	Re: New GUI tool for MS Log Parser, Log Parser Lizard Reply Contact  Is there a query specifically for FTP jobs from IIS?

• 11-26-2008, 11:28 AM

  In reply to

  Edgar the Parser Joined on 08-25-2008, 7:58 PM Denver, CO Posts 10	Re: New GUI tool for MS Log Parser, Log Parser Lizard Reply Contact What exactly are you interested about FTP statistics? P.E.N.

• 12-04-2008, 10:21 AM

  In reply to

  wfg97079 Joined on 11-26-2008, 3:21 PM Posts 2	Re: New GUI tool for MS Log Parser, Log Parser Lizard Reply Contact   Basically Id like what username logged in from what ip, what commands they issued etc

• 03-25-2009, 5:57 PM

  In reply to

  TheMasterPage Joined on 03-25-2009, 9:43 PM Posts 1	Re: New GUI tool for MS Log Parser, Log Parser Lizard Reply Contact I have noticed minor changes in lizard GUI from the previous download (ex. syntax highlight). Is this release official or beta? Can you please add option for importing queries because I need my old queries from the previous installation? Can I parse Cisco ASA Logs too? Btw helpful tool.

• 03-25-2009, 6:38 PM

  In reply to

  pen1969 Joined on 03-25-2009, 10:29 PM Posts 1	Re: New GUI tool for MS Log Parser, Log Parser Lizard Reply Contact I didn't try it, but I think newer version should keep your queries. Or, you can just save and then copy your old query file from C:\Program Files\LizardLabs\Log Parser Lizard\Queries.xml over. Log Parser can parse basically anything. You can always use TEXTLINE or TEXTWORD input formats.