Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

LogParser Help!!!

1 view
Skip to first unread message

Tal

unread,
Apr 2, 2003, 10:26:45 AM4/2/03
to
Hello all !!!

i am trying to use LogParser utility for producing reports
on some security inidents but i am facing few difficulty
to understand the syntax
for example if i want to filter only few EventID by
TimeWritten that's mean by date and to output to XML or
IIS.

Any advice?

Thanks In Advanced

Ritchie

unread,
Apr 2, 2003, 2:37:08 PM4/2/03
to
"Tal" <tba...@walla.co.il> wrote in message news:039601c2f92c$456242e0$3001...@phx.gbl...

> Hello all !!!
>
> i am trying to use LogParser utility for producing reports
> on some security inidents but i am facing few difficulty
> to understand the syntax
> for example if i want to filter only few EventID by
> TimeWritten that's mean by date and to output to XML or
> IIS.

Not sure exactly what you're asking, but this works for me: -

logparser file:query.sql -i:IISW3C -o:CSV >results.csv -stats:OFF

Where the content of query.sql is: -

SELECT *
FROM *.log
WHERE date = '2003-03-24'
AND time >= '06:00:00' AND time <= '08:00:00'

--
Ritchie


0 new messages