I believe I found my answer: "SELECT cs-username, COUNT(*) FROM e:\logfiles\smtpsvc1\ex060805*.log WHERE cs-username <> 'OutboundConnectionCommand' AND cs-method = 'STARTTLS' GROUP BY cs-username ORDER BY COUNT(*) DESC" However, I noticed that each STARTTLS connection has two entries. Perhaps one...

Hello all, I'm currently using the below command to count the number of times a sending server connects to our SMTP server with TLS: logparser.exe "SELECT cs-method, COUNT(cs-method) FROM e:\logfiles\smtpsvc1\ex06%mm%%yd%*.log WHERE cs-username <> 'OutboundConnectionCommand' AND cs-method = 'STARTTLS...

Oh, you are having an escaping issue. When you run from the command line and you need to use % as a wildcard, you need to double it so the command interpreter doesn't see it as the beginning of an environment variable.

sorry you are correct, NOT LIKE. I pasted in a old copy I was working with. WHen I try NOT LIKE it does not strip off any of the entries... However, If I explicitly enter each IP address it works. - ALex

Are you saying you want NOT LIKE instead of LIKE?

I have the following script @echo off for /f "tokens=1-3 delims=/ " %%a in ('doff mm/dd/yy -1') do ( set logdate=%%c%%a%%b%) ECHO Processing W1 C:\Progra~1\LogPar~1.2\logparser -i:IISW3C -o:W3C -e:2 "SELECT * INTO c:\somefilename.log FROM \\scenw1\weblogs$\swis\w3svc4\ex%logdate%.log WHERE c-ip LIKE...

Hi, does anyone have an affective time format? I have tried a few things on this forumn but nothing seems to work when I try to convert UTC to my local server time that is Central time. I am using 2.2 SELECT TO_DATE( TO_LOCALTIME( TO_TIMESTAMP(date, time))) AS date, TO_TIME( TO_LOCALTIME( TO_TIMESTAMP...

Where are you getting bogged down? Did you look at the MIN MAX and AVG functions?

I'm Trying to get a Response Time Summary for API Calls form a standard IIS W3C log something like: API Call API Call Count Min Resp Time Max Response Time Average Response Time Standard Deviation getAAAMethod 1000 X X X X getAABMethod 1234 X X X X Has anyone done something similar? Else any recommendations...

How do I write a query to get the hit count in five minute increments? I am using this query to get them for every hour per extension and I need it for every five minutes instead: LogParser "SELECT s-computername AS Server, TO_STRING (Date, 'yyyy-MM-dd') AS Day, TO_STRING(time, 'HH:00') AS Hour,extract_extension...