The FROM clause in this query is assuming that the security event log has been saved to a file named m1Security.evt. Your change to just Security is fine. It just means that LP will pull the logs directly from the active Event Log instead of a saved file. The problem with the query is that it tries to...

Hi All, I attempted to use the script that was included in the book in chapter 7, under Monitoring Logons. I have a need to extracte usernames of failed and successful logins. I copied and pasted the script and passed it to logparser. It generated errors. Below is the script: SELECT TO_LOWERCASE(EXTRACT_TOKEN...

Hi All, i am having problems using a Custom Input Processor from within a C# GUI. Both of these have been downloaded from the Books web site. They are; 1. The LP_Toolkit.ClusterLog (fixed version) 2. The LP_Rich_Client C# application. The ClusterLog has no problems from the command line, hence the command...

Hi I have purchased the book to help with using Logparser to analyse ISA w3c logs, all of the descriptions indicated that the book would cover this subject and in fact chapter 1 refers to a Chapter 5 which states that it will address ISA Logs, but Chapter 5 is actually about Snort and doesn't cover ISA...

Sorry for the multiple post!

Greetings, I just baught the book last weekend after being impressed with Log Parser the week before. One thing that I saw was missing (or didn't see) was that none of the field types had the SQL data type included. For example, most strings are actually (N)VARCHAR[###] and it's hard trying to find all...

I wouldn't have any problems with someone mirroring the site into Russian - I think that falls safely under the heading of "information wants to be free". Dunno how you'd handle the forums, but it should be easy enough to grab and mirror all the static content.

I heard that Syngress was in touch with some Russian distributors for this title, I'll ask them what's the status on this, and get back to you. As for mirroring this site, if you wanna do that, I'd love it!!!! We might want to chat with Mike first....

Thank you for good the tool and book. I read it from cover to cover. What you think about russian version of book and russian mirror of this site?

That's a very good point. Thanks for the idea.