Questions tagged [logparser]
The logparser tag has no usage guidance.
47
questions
1
vote
0
answers
55
views
Event Viewer works but logparser fails?
So, my Log Parser Query fails and states that the remote procedure call failed.
However, I am able to connect using the Event Viewer (which I hate); what does the event viewer use to connect that the ...
0
votes
1
answer
357
views
Logparser - Selecting data in the past 2 weeks
I am trying to use LogParser to return the data from my iis log files for the past 2 weeks. When I run the following I get "Error: Syntax Error: : no valid content: expecting opening parenthesis ...
0
votes
1
answer
1k
views
Parsing mail logs
Below is a link to an extract from my Postfix server's mail log, showing one successful SMTP transaction. Is it possible to configure Postfix to add a unique ID tag to all log entries involving the ...
0
votes
1
answer
1k
views
Disable process id showing in Syslog-ng logs
I configured syslog-ng (version 3.21.1) on a CentOS7 server and found that logs are in following format.
Aug 26 12:59:28 xyz74hd.com radiusd[20142]: 92djvd4654654164nadskj795234dc Reason: pldap: ...
-1
votes
1
answer
327
views
Windows 10 pro event log file is corrupted
I'm trying to read event log with LogParser on windows 10 pro, and the query select * from security executed well.
But I'm getting a message saying that the file is corrupted After executing the ...
0
votes
0
answers
4k
views
Log Parser error with Exchange Protocol Logs
I recently came across Microsoft Log Parser. It is an amazing tool. I am parsing Exchange Receive connector protocol logs but I encounter this error with IISW3C format.
C:\TEMP>logparser "SELECT * ...
1
vote
2
answers
84
views
Protocolling Windows-Logins with logParser
I would like to protocoll all windows logins with logparser.
Everything works fine for Application or System but not in Security.
The script looks like this:
"C:\Program Files (x86)\Log Parser 2.2"\...
0
votes
2
answers
3k
views
Where can I get postfix log example?
I have to write parser for postfix log on ruby. It should find bounce, format it to JSON and send somewhere. I'm not system administrator and don't want to install postfix server on my laptop. Where ...
2
votes
1
answer
1k
views
How to parse s3 logs?
I've been trying to parse AWS S3 logs following the documentation, but I've been running into some problems. Specifically, I keep running into new, rare log lines that break my regex. Every time this ...
3
votes
0
answers
440
views
I am looking for software that can parse emails and expect emails within a grace period [closed]
I manage a diverse set of backup systems, the only commonality is email notifications, There status being Failed, Success, Success with exceptions and unknown(where the email isn't sent).
Case 1) ...
0
votes
1
answer
299
views
nginx log entries out of sequence, possible to fix?
I have an nginx log parser which relies on fact, nginx log entries placed in sequential order. But from time to time I have log like this:
[2015-07-01T08:41:59-07:00] https "GET ...
[2015-07-01T08:42:...
1
vote
1
answer
22k
views
What's in the DNS Debug Log Message Fields
I've enable debug logging options on the DNS server, and I'm trying to parse through the output in dns.log. Here's a guide from technet on how to use server debug logging options, but I can't find ...
0
votes
1
answer
2k
views
LogParser on Windows Server 2012: Exits Immediately on Running
I'm trying to get LogParser 2.2 running on Windows Server 2012. When I attempt to run LogParser from the command prompt (just trying LogParser -h) I get a User Account Control dialog asking if I want ...
0
votes
1
answer
535
views
Working with multi line log entries (log parsing)
Say you have logs like these
Thu 2014-10-09 23:55:12: 01: Session 525229; child 0101
Thu 2014-10-09 23:55:12: 05: Accepting IMAP connection from [172.1.2.3:52337] to [1.2.3.4:143]
Thu 2014-10-09 23:...
0
votes
1
answer
1k
views
Log Parser: Getting Unique Record Numbers
I've been playing with Log Parser the past few days, we're trying to retain specific event IDs from the security logs of our Domain Controllers. As these are high traffic volume logs, the data in them ...
0
votes
0
answers
753
views
MS LogParser from a remote computer?
We have a couple of webservers. And have LogParser installed on them. I use remote desktop to log in on a server. Then i use "LogParser Studio" to work with reports and querys. The problem is that i ...
1
vote
1
answer
2k
views
IIS logparser - Count distinct from cs-uri-query?
I need to count how many DIFFERENT MAC´s that have accessed my IIS webserver and have a state value of 1.
The "MAC" adress and the "state" value are in the actual query (cs-uri-query)
So the log can ...
2
votes
1
answer
395
views
log parser doesn't interpret dates correctly
When I query our IIS logs, I get a value of '30/12/1899' in the date column.
select * from 'C:\IIS 2013 Logs\*.log'
However for some rows, it does have a valid date. (Coincidently rows that have a ...
2
votes
1
answer
239
views
What does -fixcolnames do in log parser 2.2?
I'm using Logparser 2.2 to try to bring a .csv filled with Performance Counter information into a SQL database, and I'm using the following command line command:
logparser "Select * into IISCounters ...
0
votes
1
answer
1k
views
TO_TIMESTAMP(date, time) missing seconds?
When I run log parser using the code below I get the data and time field together as expected but it is missing the seconds. How do you get it to also list the seconds? The two fields look like,
...
2
votes
1
answer
891
views
Log Parser IIS Users
I am trying to import iis log to mysql database but I am only getting part of the file. I am using this code:
LogParser "SELECT * INTO iisLog FROM \\appdev1\c$\inetpub\logs\LogFiles\W3SVC1\u_ex130312....
1
vote
1
answer
2k
views
Get the SessionID in IIS7 LogParser Query on Site Using SSL
Anyone know how to obtain the SessionID/ASPNET_SESSIONID using a LogParser query? FYI, the site I'm querying uses SSL. Currently, my query is
SELECT * FROM 'C:\inetpub\logs\LogFiles\W3SVC6\*.log'
...
0
votes
1
answer
1k
views
Logparser to monitor suspicious mailbox access?
Is it possible, using Logparser or similar, to report on Exchange 2003/2010 mailbox access from users who are not the mailbox owner?
The access might come from an Outlook client or OWA so I presume ...
0
votes
1
answer
4k
views
Can Logparser query newer log file types on 2008
I am trying to research a problem and would like to use Logparser to remotely query one of the newer 2008 log types against many remote servers. I want to query the Setup log, not application, system, ...
1
vote
1
answer
3k
views
Merging Large IIS Logs
I am planning on using Webalizer to analyze and graph our IIS logs, but because we have a server farm Webalizer requires me to make sure that all of the logs are in chronological order (or else it ...
1
vote
2
answers
901
views
How do I count successful Domain User Authentication (Log Ins) with LogParser
I need to be able to count only successful authentication attemtps for our IIS based Web Portal. All users come from the same IP Address. Is there something specific in the w3c logs to look for in ...
0
votes
1
answer
351
views
looking for a pattern in iis files with logparser s
I am looking to extract from iis
when a certain user session indicated here by aspnetsessionid times out prior to 10 minutes session timeout I have set on this application.
I am trying to parse ...
1
vote
3
answers
2k
views
How do I ensure no duplicates when using LogParser to load IIS logs into SQL Server every fifteen minutes?
I would like to set up a scheduled task to run every fifteen minutes on a work web server that will run LogParser on today's IIS log file and insert it into a SQL Server database table.
How would I ...
1
vote
1
answer
2k
views
Logparser for Linux (syslog) logs? [closed]
I'm looking for something like logparser on Windows.
Requirements:
simple tool, not engine like octopusy or sth,
able to select on text in message part,
start search in log from checkpoint on ...
0
votes
1
answer
611
views
Counting messages through sendmail
The back story here is that I would like to start using an SMTP service to start sending my email (currently sent though sendmail running locally on the server), but in order to get a good idea of ...
0
votes
1
answer
941
views
Rsync log parser
What would be a good tool to parse rsync server daemon log files?
Thanks in advance
1
vote
1
answer
529
views
search logs for events associated with Task Scheduler
I'm working with a Server08 box (Web Edition) where the Task Scheduler had run a set of unchanged housekeeping scripts for months. Over the last week, Scheduler has failed to start scripts twice.
TS'...
0
votes
1
answer
2k
views
Reviewing IIS 6.0 Logs with LogParser 2.2 for FTP logins
I've been using the Striving Life website for his IIS FTP LogParser 2.2 queries. My only issue is that I can't seem to combine the two queries that bring back both successful login AND their account ...
4
votes
3
answers
3k
views
LogParser for Apache like Microsoft IIS LogParser
Is there a tool for Apache comparable to Microsoft's II LogParser?
5
votes
2
answers
5k
views
Using LogParser to generate average response time graph
How can I get this graph:
(from Speeding up StackExchange)
It shows what percentage of web requests took longer than N seconds. I have IIS logs and LogParser installed but not sure how to proceed.
1
vote
1
answer
1k
views
Why does a pdf file download result in varying bytes logged, all with sc-status 200
I have a mojoportal CMS installation on an IIS7 server where users are reporting problems downloading a pdf file. It always downloads fine for me and most others, either displaying in browser or in ...
2
votes
1
answer
356
views
LogParser: Find all log rows where session cookie = the session cookie found in a row that had an error
Looking for examples of integrating LP into this workflow:
A SQL server event indicates IIS
tossed an error.
SQL parses the body of the error
message and generates an LP
commandline that queries IIS ...
0
votes
1
answer
225
views
need help with logparser on iis logs
I am using logparser 2.2 and need a script that does two things:
finding urls that contain a value within referer
need to loop over 30 folders
logparser -rpt:-1 "select count()INTO feeds.txt from ...
2
votes
2
answers
3k
views
LogParser query to grab only external IP addresses from IIS logs?
I'm working on a public website that is used by both external visitors and internal employees. I'm after the external visitor hits, but I can't think of a good way to filter out the internal IP ...
2
votes
4
answers
3k
views
Akamai log processing
I'm digging through Akamai logs, downloading excel sheets, and then manually joining them so that I can do sorting of data to find top videos and referrers. Are there any tools you know of to help ...
1
vote
1
answer
397
views
logparser Message with error codes
Is there anyway to get complete error message using LogParser?
When I run the following query:
logparser -i:EVT -o:NAT "SELECT TimeGenerated,EventID,Message from System WHERE EventTypeName='Error ...
3
votes
2
answers
11k
views
How to use logparser to query IIS log entries logged in the past N minutes?
The host is located in the EDT time zone. Event logs are logged using EDT. IIS logs are getting logged using UTC, and I'm not sure which logparser construct helps account for UTC.
For example, ...
1
vote
1
answer
3k
views
Getting Concurrent Session Metrics from IIS Raw Logs?
I have IIS 6 and 7 raw log files and the Log Parser tool version 2.2 and I want to find the peak/max concurrent sessions per day that are recorded on the logs for the last 30 days. Is there a quick ...
86
votes
8
answers
50k
views
Recommended LogParser queries for IIS monitoring?
As Stack Overflow grows, we're starting to look closely at our IIS logs to identify problem HTTP clients -- things like rogue web spiders, users who have a large page set to refresh every second, ...
13
votes
5
answers
59k
views
What is a good SQUID Logs Analyzer? [closed]
Can anyone recommend me a good tool for analyzing squid logs ?
I'm currently using SARG. Is there something better?
I need to easily see what sites were visited/denied, when and by whom.
There is ...
18
votes
11
answers
35k
views
Any freeware IIS log analyzer? [closed]
It would be nice to use ASP.NET, but PHP is ok too, and should be hosted in IIS6.
EDIT: the logs are from our intranet site.
2
votes
2
answers
2k
views
LogParser and Quantize: Add 0 for empty values
I use LogParser on my IIS Log to get a graph of accesses per hour:
SELECT date,QUANTIZE(time,3600),COUNT(*) FROM ex*.log WHERE cs-uri-stem
LIKE '%SomePage.aspx' GROUP BY date,QUANTIZE(time,3600)
The ...