Log Parser Help

[Pages:639]Log Parser

Log parser is a powerful, versatile tool that provides universal query access to text-based data such as log files, XML files and CSV files, as well as key data sources on the Windows? operating system such as the Event Log, the Registry, the file system, and Active Directory?. You tell Log Parser what information you need and how you want it processed. The results of your query can be custom-formatted in text based output, or they can be persisted to more specialty targets like SQL, SYSLOG, or a chart. The world is your database with Log Parser.

Most software is designed to accomplish a limited number of specific tasks. Log Parser is different... the number of ways it can be used is limited only by the needs and imagination of the user. If you find a creative way to use it, let us know at !

Here are some samples to whet your appetite...

Search for Data

Search for the logons of a specific user among the events in the Windows Event Log:

C:\>LogParser "SELECT TimeGenerated, SourceName, EventCategoryName, Message INTO report.txt FROM Security WHERE EventID = 528 AND SID ALnIdKoEb't%aiTnErSeTsUulStsEiRn%a'"te-rxetsfoillevefSoIrDmsa:OtteNd as desired:

Create Reports

Create custom-formatted HTML reports:

Calculate Statistics

Calculate the distribution of the HTTP response status codes from your IIS log files:

C:\>LogParser "SELECT sc-status, COUNT(*) AS Times INTO Chart.gif FR OM GROUP BY sc-status ORDER BY Times DESC" -chartType:PieExpl Aonddedp3roDd-ucchearatTcithlea:"rtSftoatrumsaCttoeddesa"s desired:

System Requirements

Log Parser is compatible with the Windows? 2000, Windows? XP Professional, and Windows ServerTM 2003 operating systems.

? 2004 Microsoft Corporation. All rights reserved.

What's New in Log Parser 2.2

New Input and Output Formats:

XML Input Format Reads XML files (requires the Microsoft? XML Parser (MSXML))

TSV Input Format Reads tab- and space- separated values text files

ADS Input Format Reads information from Active Directory objects

COM Input Format Makes it possible to plugin user-implemented custom Input Formats

REG Input Format Reads information from the Windows Registry

NETMON Input Format Makes it possible to parse NetMon .cap capture files

ETW Input Format Reads Event Tracing for Windows log files and live sessions

CHART Output Format Creates chart image files (requires Microsoft Office 2000 or later)

TSV Output Format Writes tab- and space- separated values text files

SYSLOG Output Format Sends information to a SYSLOG server or to a SYSLOG-formatted text file

Improvements to the SQL Engine:

Exponential performance improvement in SELECT DISTINCT and GROUP BY queries

"WITH ROLLUP" functionality in the GROUP BY clause

"DISTINCT" in aggregate functions (when no GROUP BY clause is specified)

"PROPSUM(...) [ ON ]" and "PROPCOUNT(...) [ ON ]" aggregate functions

(these functions calculate the ratio between the SUM or COUNT functions on a field and the SUM or COUNT functions on the same field in a hierarchically higher group)

New functions: MOD BIT_AND, BIT_OR, BIT_NOT, BIT_XOR, BIT_SHL, BIT_SHR EXP10, LOG10 ROUND, FLOOR QNTROUND_TO_DIGIT, QNTFLOOR_TO_DIGIT STRREPEAT IN_ROW_NUMBER, OUT_ROW_NUMBER ROT13 EXTRACT_FILENAME, EXTRACT_EXTENSION, EXTRACT_PATH HEX_TO_ASC, HEX_TO_PRINT, HEX_TO_INT HEX_TO_HEX8, HEX_TO_HEX16, HEX_TO_HEX32 IPV4_TO_INT, INT_TO_IPV4 HASHSEQ, HASHMD5_FILE EXTRACT_PREFIX, EXTRACT_SUFFIX

 ................
................

In order to avoid copyright disputes, this page is only a partial summary.

Google Online Preview   Download