That data does not look like it is IISW3C formatted data. Read the section of the help file pertaining to input formats and either find an input format that matches your file or use TEXTLINE or write your own input format.

Hi - I'm new to Log Parser but it certainly seems to be the problem that will do what i need (if i could only get it going) Here is a snippet of the data that I want to convert/pull data from: [code] /O=MAIN_COMPANY/OU=AIMSMAIN/CN=CONFIGURATION/CN=SERVERS/CN=ELSSHAS36702/CN=MICROSOFT PRIVATE MDB C=GB;A...

Whether it is possible using LP depends on what exactly you mean by a window of one hour. Would windows be only 1 to 2; 2 to 3; 3 to 4, or would they also include 1:45 to 2:45? If you are looking for elapsed time alone then you can't do it in LP. You need a cartesian join and LP doesn't have join capability...

I am an absolute beginner with Logparser and just learning how to use it. I have huge ISA 2004 logs in w3c format and I need to find out users accessing the Internet from different machines within any window of 1 hour. To explain in detail, here is the logic: Find all users (field:authenticated user...

Yes string functions in LP are generally case sensitive. there are TO_LOWERCASE() and TO_UPPERCASE() functions as well.

Hi folks, Simple question: Are string functions such as REPLACE_STR() generally case sensitive or not ? -Daragh.

Perfect! That's exactly what I needed... THANKS!!

SELECT page, count(*) USING EXTRACT_PREFIX(cs-url, 0, '?') AS page GROUP BY page

I'm using LogParser to look at ISA logs that are in the W3C format. This format includes the cs-url field but not the cs-url-stem field. How can I perform a count on the cs-url field but have it look only at the url up to the page and EXCLUDE the querystring? So, page1.asp?id=1 and page1.asp?id=2 will...

These logs should be parsable with the "W3C" input format.