Questions tagged [logparser]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
0 answers
55 views

Event Viewer works but logparser fails?

So, my Log Parser Query fails and states that the remote procedure call failed. However, I am able to connect using the Event Viewer (which I hate); what does the event viewer use to connect that the ...
leeand00's user avatar
  • 4,919
0 votes
1 answer
357 views

Logparser - Selecting data in the past 2 weeks

I am trying to use LogParser to return the data from my iis log files for the past 2 weeks. When I run the following I get "Error: Syntax Error: : no valid content: expecting opening parenthesis ...
thehouseisburning's user avatar
0 votes
1 answer
1k views

Parsing mail logs

Below is a link to an extract from my Postfix server's mail log, showing one successful SMTP transaction. Is it possible to configure Postfix to add a unique ID tag to all log entries involving the ...
Julian's user avatar
  • 1
0 votes
1 answer
1k views

Disable process id showing in Syslog-ng logs

I configured syslog-ng (version 3.21.1) on a CentOS7 server and found that logs are in following format. Aug 26 12:59:28 xyz74hd.com radiusd[20142]: 92djvd4654654164nadskj795234dc Reason: pldap: ...
Aghori's user avatar
  • 5
-1 votes
1 answer
327 views

Windows 10 pro event log file is corrupted

I'm trying to read event log with LogParser on windows 10 pro, and the query select * from security executed well. But I'm getting a message saying that the file is corrupted After executing the ...
Mr.kang's user avatar
  • 109
0 votes
0 answers
4k views

Log Parser error with Exchange Protocol Logs

I recently came across Microsoft Log Parser. It is an amazing tool. I am parsing Exchange Receive connector protocol logs but I encounter this error with IISW3C format. C:\TEMP>logparser "SELECT * ...
Lordbalmon's user avatar
1 vote
2 answers
84 views

Protocolling Windows-Logins with logParser

I would like to protocoll all windows logins with logparser. Everything works fine for Application or System but not in Security. The script looks like this: "C:\Program Files (x86)\Log Parser 2.2"\...
Loggy's user avatar
  • 11
0 votes
2 answers
3k views

Where can I get postfix log example?

I have to write parser for postfix log on ruby. It should find bounce, format it to JSON and send somewhere. I'm not system administrator and don't want to install postfix server on my laptop. Where ...
mlwrm's user avatar
  • 11
2 votes
1 answer
1k views

How to parse s3 logs?

I've been trying to parse AWS S3 logs following the documentation, but I've been running into some problems. Specifically, I keep running into new, rare log lines that break my regex. Every time this ...
Talia's user avatar
  • 201
3 votes
0 answers
440 views

I am looking for software that can parse emails and expect emails within a grace period [closed]

I manage a diverse set of backup systems, the only commonality is email notifications, There status being Failed, Success, Success with exceptions and unknown(where the email isn't sent). Case 1) ...
Jacob Evans's user avatar
  • 8,006
0 votes
1 answer
299 views

nginx log entries out of sequence, possible to fix?

I have an nginx log parser which relies on fact, nginx log entries placed in sequential order. But from time to time I have log like this: [2015-07-01T08:41:59-07:00] https "GET ... [2015-07-01T08:42:...
greggyNapalm's user avatar
1 vote
1 answer
22k views

What's in the DNS Debug Log Message Fields

I've enable debug logging options on the DNS server, and I'm trying to parse through the output in dns.log. Here's a guide from technet on how to use server debug logging options, but I can't find ...
KyleMit's user avatar
  • 488
0 votes
1 answer
2k views

LogParser on Windows Server 2012: Exits Immediately on Running

I'm trying to get LogParser 2.2 running on Windows Server 2012. When I attempt to run LogParser from the command prompt (just trying LogParser -h) I get a User Account Control dialog asking if I want ...
Simon Elms's user avatar
0 votes
1 answer
535 views

Working with multi line log entries (log parsing)

Say you have logs like these Thu 2014-10-09 23:55:12: 01: Session 525229; child 0101 Thu 2014-10-09 23:55:12: 05: Accepting IMAP connection from [172.1.2.3:52337] to [1.2.3.4:143] Thu 2014-10-09 23:...
Marki's user avatar
  • 2,854
0 votes
1 answer
1k views

Log Parser: Getting Unique Record Numbers

I've been playing with Log Parser the past few days, we're trying to retain specific event IDs from the security logs of our Domain Controllers. As these are high traffic volume logs, the data in them ...
Matt's user avatar
  • 1,893
0 votes
0 answers
753 views

MS LogParser from a remote computer?

We have a couple of webservers. And have LogParser installed on them. I use remote desktop to log in on a server. Then i use "LogParser Studio" to work with reports and querys. The problem is that i ...
Juw's user avatar
  • 127
1 vote
1 answer
2k views

IIS logparser - Count distinct from cs-uri-query?

I need to count how many DIFFERENT MAC´s that have accessed my IIS webserver and have a state value of 1. The "MAC" adress and the "state" value are in the actual query (cs-uri-query) So the log can ...
Juw's user avatar
  • 127
2 votes
1 answer
395 views

log parser doesn't interpret dates correctly

When I query our IIS logs, I get a value of '30/12/1899' in the date column. select * from 'C:\IIS 2013 Logs\*.log' However for some rows, it does have a valid date. (Coincidently rows that have a ...
Fidel's user avatar
  • 412
2 votes
1 answer
239 views

What does -fixcolnames do in log parser 2.2?

I'm using Logparser 2.2 to try to bring a .csv filled with Performance Counter information into a SQL database, and I'm using the following command line command: logparser "Select * into IISCounters ...
Sean Long's user avatar
  • 463
0 votes
1 answer
1k views

TO_TIMESTAMP(date, time) missing seconds?

When I run log parser using the code below I get the data and time field together as expected but it is missing the seconds. How do you get it to also list the seconds? The two fields look like, ...
user2158283's user avatar
2 votes
1 answer
891 views

Log Parser IIS Users

I am trying to import iis log to mysql database but I am only getting part of the file. I am using this code: LogParser "SELECT * INTO iisLog FROM \\appdev1\c$\inetpub\logs\LogFiles\W3SVC1\u_ex130312....
user2158283's user avatar
1 vote
1 answer
2k views

Get the SessionID in IIS7 LogParser Query on Site Using SSL

Anyone know how to obtain the SessionID/ASPNET_SESSIONID using a LogParser query? FYI, the site I'm querying uses SSL. Currently, my query is SELECT * FROM 'C:\inetpub\logs\LogFiles\W3SVC6\*.log' ...
salesforcedevinar's user avatar
0 votes
1 answer
1k views

Logparser to monitor suspicious mailbox access?

Is it possible, using Logparser or similar, to report on Exchange 2003/2010 mailbox access from users who are not the mailbox owner? The access might come from an Outlook client or OWA so I presume ...
Danny's user avatar
  • 125
0 votes
1 answer
4k views

Can Logparser query newer log file types on 2008

I am trying to research a problem and would like to use Logparser to remotely query one of the newer 2008 log types against many remote servers. I want to query the Setup log, not application, system, ...
Clayton's user avatar
  • 4,573
1 vote
1 answer
3k views

Merging Large IIS Logs

I am planning on using Webalizer to analyze and graph our IIS logs, but because we have a server farm Webalizer requires me to make sure that all of the logs are in chronological order (or else it ...
Arrya Regan's user avatar
1 vote
2 answers
901 views

How do I count successful Domain User Authentication (Log Ins) with LogParser

I need to be able to count only successful authentication attemtps for our IIS based Web Portal. All users come from the same IP Address. Is there something specific in the w3c logs to look for in ...
dexter's user avatar
  • 113
0 votes
1 answer
351 views

looking for a pattern in iis files with logparser s

I am looking to extract from iis when a certain user session indicated here by aspnetsessionid times out prior to 10 minutes session timeout I have set on this application. I am trying to parse ...
kiev's user avatar
  • 123
1 vote
3 answers
2k views

How do I ensure no duplicates when using LogParser to load IIS logs into SQL Server every fifteen minutes?

I would like to set up a scheduled task to run every fifteen minutes on a work web server that will run LogParser on today's IIS log file and insert it into a SQL Server database table. How would I ...
Ian Roke's user avatar
  • 111
1 vote
1 answer
2k views

Logparser for Linux (syslog) logs? [closed]

I'm looking for something like logparser on Windows. Requirements: simple tool, not engine like octopusy or sth, able to select on text in message part, start search in log from checkpoint on ...
ziembor's user avatar
  • 23
0 votes
1 answer
611 views

Counting messages through sendmail

The back story here is that I would like to start using an SMTP service to start sending my email (currently sent though sendmail running locally on the server), but in order to get a good idea of ...
user15893's user avatar
  • 111
0 votes
1 answer
941 views

Rsync log parser

What would be a good tool to parse rsync server daemon log files? Thanks in advance
Norba's user avatar
  • 57
1 vote
1 answer
529 views

search logs for events associated with Task Scheduler

I'm working with a Server08 box (Web Edition) where the Task Scheduler had run a set of unchanged housekeeping scripts for months. Over the last week, Scheduler has failed to start scripts twice. TS'...
justSteve's user avatar
  • 859
0 votes
1 answer
2k views

Reviewing IIS 6.0 Logs with LogParser 2.2 for FTP logins

I've been using the Striving Life website for his IIS FTP LogParser 2.2 queries. My only issue is that I can't seem to combine the two queries that bring back both successful login AND their account ...
breadly's user avatar
  • 217
4 votes
3 answers
3k views

LogParser for Apache like Microsoft IIS LogParser

Is there a tool for Apache comparable to Microsoft's II LogParser?
jack's user avatar
  • 167
5 votes
2 answers
5k views

Using LogParser to generate average response time graph

How can I get this graph: (from Speeding up StackExchange) It shows what percentage of web requests took longer than N seconds. I have IIS logs and LogParser installed but not sure how to proceed.
Pavel Chuchuva's user avatar
1 vote
1 answer
1k views

Why does a pdf file download result in varying bytes logged, all with sc-status 200

I have a mojoportal CMS installation on an IIS7 server where users are reporting problems downloading a pdf file. It always downloads fine for me and most others, either displaying in browser or in ...
Pat James's user avatar
  • 199
2 votes
1 answer
356 views

LogParser: Find all log rows where session cookie = the session cookie found in a row that had an error

Looking for examples of integrating LP into this workflow: A SQL server event indicates IIS tossed an error. SQL parses the body of the error message and generates an LP commandline that queries IIS ...
justSteve's user avatar
  • 859
0 votes
1 answer
225 views

need help with logparser on iis logs

I am using logparser 2.2 and need a script that does two things: finding urls that contain a value within referer need to loop over 30 folders logparser -rpt:-1 "select count()INTO feeds.txt from ...
user36440's user avatar
  • 325
2 votes
2 answers
3k views

LogParser query to grab only external IP addresses from IIS logs?

I'm working on a public website that is used by both external visitors and internal employees. I'm after the external visitor hits, but I can't think of a good way to filter out the internal IP ...
Josh's user avatar
  • 245
2 votes
4 answers
3k views

Akamai log processing

I'm digging through Akamai logs, downloading excel sheets, and then manually joining them so that I can do sorting of data to find top videos and referrers. Are there any tools you know of to help ...
dsldsl's user avatar
  • 141
1 vote
1 answer
397 views

logparser Message with error codes

Is there anyway to get complete error message using LogParser? When I run the following query: logparser -i:EVT -o:NAT "SELECT TimeGenerated,EventID,Message from System WHERE EventTypeName='Error ...
Nasir's user avatar
  • 229
3 votes
2 answers
11k views

How to use logparser to query IIS log entries logged in the past N minutes?

The host is located in the EDT time zone. Event logs are logged using EDT. IIS logs are getting logged using UTC, and I'm not sure which logparser construct helps account for UTC. For example, ...
user avatar
1 vote
1 answer
3k views

Getting Concurrent Session Metrics from IIS Raw Logs?

I have IIS 6 and 7 raw log files and the Log Parser tool version 2.2 and I want to find the peak/max concurrent sessions per day that are recorded on the logs for the last 30 days. Is there a quick ...
λ Jonas Gorauskas's user avatar
86 votes
8 answers
50k views

Recommended LogParser queries for IIS monitoring?

As Stack Overflow grows, we're starting to look closely at our IIS logs to identify problem HTTP clients -- things like rogue web spiders, users who have a large page set to refresh every second, ...
Jeff Atwood's user avatar
  • 13.2k
13 votes
5 answers
59k views

What is a good SQUID Logs Analyzer? [closed]

Can anyone recommend me a good tool for analyzing squid logs ? I'm currently using SARG. Is there something better? I need to easily see what sites were visited/denied, when and by whom. There is ...
Jindrich's user avatar
  • 4,989
18 votes
11 answers
35k views

Any freeware IIS log analyzer? [closed]

It would be nice to use ASP.NET, but PHP is ok too, and should be hosted in IIS6. EDIT: the logs are from our intranet site.
alexandrul's user avatar
  • 1,435
2 votes
2 answers
2k views

LogParser and Quantize: Add 0 for empty values

I use LogParser on my IIS Log to get a graph of accesses per hour: SELECT date,QUANTIZE(time,3600),COUNT(*) FROM ex*.log WHERE cs-uri-stem LIKE '%SomePage.aspx' GROUP BY date,QUANTIZE(time,3600) The ...
Michael Stum's user avatar
  • 4,060