SELECT ref , querystring , queryq , queryqws USING [cs(Referer)] AS ref -- just rename to get rid of funky () chars , EXTRACT_SUFFIX(ref, 0, '?') AS querystring -- Get everything after ? , EXTRACT_VALUE(querystring, 'q') AS queryq -- get the value of q=... , REPLACE_STR(queryq, '+', ' ') AS queryqws...

Hi, I am trying to use logparser to get searchphrases from a IIS logfile. I tried to get the search phrases from google by using this code: extract_token(cs(Referer),1,'q=') which gave as output: castle+rock+snmp&btnG=Google+zoeken&meta=cr%3DcountryNL I want to strip this string to '&' so...

Sorry, wrong forum room

I have a question on automation tips using the command line logparser, currently I'm using it to run against my IIS logs each day and output my required data to a SQL server. I would like to run this command automatically each day and I'm having trouble doing a scheduled task due to "" in the command...

From the Help File : TO_LOCALTIME ( timestamp <TIMESTAMP> ) Converts a timestamp from Universal Time Coordinates (UTC) time into local time. Arguments: timestamp : UTC timestamp to convert Return type: TIMESTAMP Remarks: The conversion performed by the TO_LOCALTIME function employs the system timezone...

I thought I once read that there was a way to use logparser to convert the iis times in the iis files to local time. As you all know this would help greatly in troubleshooting. I thought I saw it on this site but I can't locate it again. Any help would be greatly appreciated.

Hi, The best way to do what you need is usage a chart configuration scripts. More about this scripts you can read in: forum CHART Output on this site - http://www.logparser.com/instantforum33/messages.aspx?ForumID=32 and some threads in this forum - http://www.logparser.com/instantforum33/shwmessage...

I am new to Log Parser and not very experinced in scripting. I need little help in adding displaying Current System Date on the Chart that I am creating from IIS Log file. This is my script which is working fine and I am creating a chart: logparser "SELECT TO_STRING(time, 'HH') AS Hour, COUNT(*) AS Hits...

Oh, you meant the field names...you can do: C:\>LogParser -h -i:NCSA Which will show all the field names.

In one of the "example" scripts I found, there was a qwery string that reported back what the field were... But now that I know what format they are in I can experiment. Most of my test qwery's were comming back as invalif as I was using ghe wrong format...