Well, this is a well-written query, I can't see why it shouldn't work... Just a couple of possibilities: - Are you executing the command in a batch file? If so, the cmd shell will replace %10061% with the value of the environment variables (most likely an empty string); to workaround this, I think you...

I am trying to perform the following query: SELECT TO_STRING(TO_LOCALTIME(TimeGenerated), 'MM/dd/yyyy') AS HitDate, COUNT(*) AS Hits FROM ApplicationLog*.Evt TO EventLog.csv WHERE (Message LIKE '%10061%') GROUP BY HitDate ORDER BY HitDate The query returns 0 records. I had another query that used "WHERE...