Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [logparser]

47 questions
1
vote
2 answers

Protocolling Windows-Logins with logParser

I would like to protocoll all windows logins with logparser. Everything works fine for Application or System but not in Security. The script looks like this: "C:\Program Files (x86)\Log Parser 2.2"\logparser.exe -i:EVT -o:TPL…
Loggy
  • 11
  • 1
1
vote
1 answer

logparser Message with error codes

Is there anyway to get complete error message using LogParser? When I run the following query: logparser -i:EVT -o:NAT "SELECT TimeGenerated,EventID,Message from System WHERE EventTypeName='Error event'" I get the following output: 2009-09-02…
Nasir
  • 229
  • 1
  • 4
  • 14
1
vote
1 answer

What's in the DNS Debug Log Message Fields

I've enable debug logging options on the DNS server, and I'm trying to parse through the output in dns.log. Here's a guide from technet on how to use server debug logging options, but I can't find anything authoritative as to what the standard…
KyleMit
  • 488
  • 4
  • 9
  • 22
1
vote
1 answer

Getting Concurrent Session Metrics from IIS Raw Logs?

I have IIS 6 and 7 raw log files and the Log Parser tool version 2.2 and I want to find the peak/max concurrent sessions per day that are recorded on the logs for the last 30 days. Is there a quick example of how to do this with Log Parser? Or is…
λ Jonas Gorauskas
  • 373
  • 1
  • 4
  • 9
1
vote
1 answer

IIS logparser - Count distinct from cs-uri-query?

I need to count how many DIFFERENT MAC´s that have accessed my IIS webserver and have a state value of 1. The "MAC" adress and the "state" value are in the actual query (cs-uri-query) So the log can look like this (only the cs-uri-query field are…
Juw
  • 127
  • 1
  • 10
1
vote
1 answer

Get the SessionID in IIS7 LogParser Query on Site Using SSL

Anyone know how to obtain the SessionID/ASPNET_SESSIONID using a LogParser query? FYI, the site I'm querying uses SSL. Currently, my query is SELECT * FROM 'C:\inetpub\logs\LogFiles\W3SVC6\*.log' where cs-uri-stem like '%.doc' OR cs-uri-stem like…
salesforcedevinar
  • 13
  • 4
1
vote
1 answer

Merging Large IIS Logs

I am planning on using Webalizer to analyze and graph our IIS logs, but because we have a server farm Webalizer requires me to make sure that all of the logs are in chronological order (or else it will start skipping results). Our logs are stored…
Arrya Regan
  • 113
  • 1
  • 6
1
vote
2 answers

How do I count successful Domain User Authentication (Log Ins) with LogParser

I need to be able to count only successful authentication attemtps for our IIS based Web Portal. All users come from the same IP Address. Is there something specific in the w3c logs to look for in order to perform what I am after?
dexter
  • 113
  • 4
1
vote
3 answers

How do I ensure no duplicates when using LogParser to load IIS logs into SQL Server every fifteen minutes?

I would like to set up a scheduled task to run every fifteen minutes on a work web server that will run LogParser on today's IIS log file and insert it into a SQL Server database table. How would I ensure that I don't copy in any duplicate data but…
Ian Roke
  • 111
  • 3
1
vote
1 answer

Logparser for Linux (syslog) logs?

I'm looking for something like logparser on Windows. Requirements: simple tool, not engine like octopusy or sth, able to select on text in message part, start search in log from checkpoint on previous search. Any idea?
ziembor
  • 23
  • 6
1
vote
1 answer

search logs for events associated with Task Scheduler

I'm working with a Server08 box (Web Edition) where the Task Scheduler had run a set of unchanged housekeeping scripts for months. Over the last week, Scheduler has failed to start scripts twice. TS's UI is not reporting any error condition - just…
justSteve
  • 859
  • 1
  • 7
  • 19
1
vote
1 answer

Why does a pdf file download result in varying bytes logged, all with sc-status 200

I have a mojoportal CMS installation on an IIS7 server where users are reporting problems downloading a pdf file. It always downloads fine for me and most others, either displaying in browser or in Adobe Reader. Using logparser to query the IIS…
Pat James
  • 179
  • 1
  • 11
1
vote
0 answers

Event Viewer works but logparser fails?

So, my Log Parser Query fails and states that the remote procedure call failed. However, I am able to connect using the Event Viewer (which I hate); what does the event viewer use to connect that the log parser does not? C:\Program Files (x86)\Log…
leeand00
  • 4,869
  • 15
  • 69
  • 110
0
votes
1 answer

Disable process id showing in Syslog-ng logs

I configured syslog-ng (version 3.21.1) on a CentOS7 server and found that logs are in following format. Aug 26 12:59:28 xyz74hd.com radiusd[20142]: 92djvd4654654164nadskj795234dc Reason: pldap: Forind credentials incorrect: Invalid credentials…
Aghori
  • 5
  • 6
0
votes
0 answers

Log Parser error with Exchange Protocol Logs

I recently came across Microsoft Log Parser. It is an amazing tool. I am parsing Exchange Receive connector protocol logs but I encounter this error with IISW3C format. C:\TEMP>logparser "SELECT * FROM RECV20170706-1.LOG" -i:IISW3C Task completed…
Lordbalmon
  • 121
  • 1
  • 7
1
2
3 4