Relatively new to log parser (v 2.2). Have ASP pages running fine to query IIS web logs. Now trying to get one to report on Event logs, but can't figure out how to get around access errors. When I set the path to the actual event log file, I get: CLogQueryClass error '80070020' [The process...

Does logparser support localized event logs? If so, is there anything special needs to be done to get this going? Thanks!

Ok...say my normal operating hours are 9am-5pm. How would I write a query to look for logons outside of that time period? I know how to look within that timeframe, but cant figure out how to look outside of that timeframe. Thanks

I switched to the new version and its working great...Thanks!

I probe (copy & paste) your post and works fine with Logparser v2.2.10 , which version have you?

I have tried that: LogParser.exe "select EventID, TimeGenerated, Message, ComputerName, RESOLVE_SID(SID) as Username from C:\Log_Files\2007_6_13\evt\SecEvent_20070613_07.Evt TO TEST.html WHERE TimeGenerated BETWEEN TO_TIMESTAMP('2007-06-08 00:00:01', 'yyyy-MM-dd hh:mm:ss') AND TO_TIMESTAMP('2007-06-08...

Is there anyway to just grab all events in the Security log that are generated by a specific user? Thanks

probe this: LogParser "SELECT TimeGenerated, EventId,EventTypeName, EventCategoryName, extract_token(strings,10,'|') as UserName, extract_token(strings,2,'|') as File INTO security.txt FROM \\remoteserver\Security WHERE extract_token(string,1,'|') like 'File' and File = 'D:\data\Public\apps\Research...

I'm developing an application that loads event logs into SQL Server 2005 using the LogParser 2.2 COM interface - this all works fine. However, I am supplied with binary EVT files from a large number of servers / clients running Win2003, WinXP and Vista and depending upon which platform the files are...

Must Be: WHERE TimeGenerated BETWEEN TO_TIMESTAMP('2007-05-22 00:00:01', 'yyyy-MM-dd hh:mm:ss') AND TO_TIMESTAMP('2007-05-24 23:59:59', 'yyyy-MM-dd hh:mm:ss') Probe!