Log Parser Studio

Log Parser Studio is a utility that allows you to search through and create reports from your IIS, Event, EXADB and others types of logs. It builds on top of Log Parser 2.2 and has a full user interface for easy creation and management of related SQL queries.

4.6 Star
306,653 times
Add to favorites
E-mail Twitter del.icio.us Digg Facebook
  • Compare two CSV files
    1 Posts | Last post April 03, 2014
    • Is it possible to compare two csv files with Log Parser?  I know it is possible to parse for missing fields but is it possible to compare differences in the CSV File?
      I know this works:
          SamAccountName NOT IN
          (SELECT SamAccountName
           FROM master.csv)
      What if I wanted to check if the group name was different in one of the files?  What SQL strings would I use?
  • Parsing IISW3CLOG format (Issues)
    2 Posts | Last post March 26, 2014
    • Have been running queries to calculate bandwidth used/served per month and received mixed results far lower than expected, some with _negative_ values.
      Running the same query in LogParser itself yields the correct results.
      My guess is that some log files don't have cs-bytes and sc-bytes (default log format in IIS doesn't include these) and LogParserStudio is perhaps not honoring the headers if they're 
        a) different in subsequent files 
        b) redefined inside the same log file
      Query used was:
        TO_LOWERCASE(cs-host) as host, 
        TO_INT(TO_STRING(TO_DATE(Date), 'yyyy')) AS year,
        TO_INT(TO_STRING(TO_DATE(Date), 'MM')) AS month,
        count(*) as hits,
        sum(cs-bytes) as inbytes, 
        sum(sc-bytes) as outbytes
      from '[LOGFILEPATH]'
      group by 
        TO_INT(TO_STRING(TO_DATE(Date), 'yyyy')), 
        TO_INT(TO_STRING(TO_DATE(Date), 'MM')) 
      order by 
        host, year, month
      PS: I couldn't find any other place to submit this - seems like a great GUI extension to an already great tool.
    • Hi dtrans,
      I'll have to try to test this. LPS simply tries to hand the query off to LP 2.2. I'm guessing the same as you where the first time the header is encountered it is set there and subsequent one's may get ignored. I'll try to see if I can find the best answer. However, this is the best place to submit questions, or my blog where there are a number of LPS articles. http://blogs.technet.com/b/karywa/
  • Message Tracking - "Top Talkers by Sender" of the last hours
    1 Posts | Last post March 07, 2014
    • Hello,
      how can I modify the "Exchange 2010 Message Tracking: Top Talkers by Sender " Script, to get only Results of the last 4 hours?
      I dont know the syntax to realize it.
      I want to export ist to Powershell and schedule it, so that I can detect Auto Reply Loops and notify myself about it.
      Best Regards
  • Common setting for all users
    1 Posts | Last post February 17, 2014
    • Hi. 
      I want to set up program settings common to all users on the server. How I can do that?
  • Parsing log4net logs
    1 Posts | Last post January 18, 2014
    • Hi, I am trying to find a way to parse log4net logs, but cant do that via LPS. 
      I tryed to use Log Parser Lizard and there I can specify xml which describe log file format. Unfortunatly LPL not free and I can't use it after trial. Can I do something like this in LPS?
      For example I have log with such format:
      INFO  [2013-12-01 00:55:24,268] [NIT.ClientWeb.Controllers.AccountController.Login] NIT.NIT.uk is Invoked at 12/1/2013 12:55:24 AM 
      and I can describe it with xml with regex like 
      <?xml version="1.0" encoding="UTF-8"?>
      <config xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="C:\src\LogParserCSWebServiceInputFormat\LogParserRegexInputFormat.xsd">
                  <field name="LogType" type="String"/>
                  <field name="DateTime" type="Timestamp" format="yyyy-MM-dd HH:mm:ss,fff"/>
                  <field name="MethodName" type="String"/>             
                  <field name="Message" type="String"/>
  • Text Query text into sql table
    1 Posts | Last post December 17, 2013
    • Very useful, but how can I query text into sql table with sql parameter?
      Also , Log Type doesnot contain Sql.
  • Export Query as PowerShell script - problem
    2 Posts | Last post December 11, 2013
    • After choosing file name, the dialogbox is shown:
      Title: Export Library
      Message: Could not export to PowerShell:
               Object reference not set to instance of an object.
      How to resolve this problem?
    • Hi Victor,
      This has been fixed in the latest version: http://gallery.technet.microsoft.com/Log-Parser-Studio-cd458765
  • Application Error
    2 Posts | Last post December 11, 2013
    • Like Lazarus, I ran into this (interestingly, this did previously work).
      Backgroud thread error:one or more errors occurred.
      System.NullReferenceException: <InputFileFormatType>format returned null. The xml settings for this format may be corrupt or contain invalid entries.
      I clicked "Reset All Log Formats" in Options > Preferences. This reset my files in
      C:\Users\YourUserName\AppData\Roaming\ExLPT\Log Parser Studio\Config
      I also deleted these files and reset them.  I saw them come back after the reset.  I have tried to reinstall.  The logs work on another computer with LPS 2
    • Hi Lazarus/Diothar,
      I don't think this error can occur unless there is some permissions issue reading the config files. This of course should never happen on a normal system because all the config files are stored with in the user's profile. Additionally, if resetting them recreates them, I would think they can be read.
      I have seen this occur for one single internal user during the beta phase. I still suspect it is related to permissions and the user profile or similar. If I can repro this I can fix it but I have been unable to reproduce it thus far.
  • The specified checkpoint file is smaller than
    2 Posts | Last post December 11, 2013
    • Hello,
      I got the log parser 2.2 ran on window 2008 server for so many years.  Yesterday, the C drive was full.  After we clean and reclaim disk space, the log parser still give me an error "The specified checkpoint file is smaller than ".
      I got the file lpc file corrupted before, so I deleted the error_log.lpc but the problem still persist.
      I think about rebooting the server at mid-night.  Any idea?
    • Hi Diane,
      Check the properties for the IISW3C log type in LPS and make sure the iCheckpoint field is correct. I'm guessing it may have been previously set and the file it points to could be corrupted or the path itself is now incorrect. You might make sure it is blank and retry.
  • Advanced Logging for IIS
    2 Posts | Last post December 11, 2013
    • Hi,
      I'm using advanced logging for IIS which basically creates the same log file structure as the usual log, only with more available fields to choose from.
      I cannot use the IISW3CLOG parser because that parser assumes the existence of fields which are not part of my log.
      I tried W3CLOG by I get an error invalid cast exception (IISW3CINProperties to type W3CINProperties).
      I tried tabular separated file format, but it recognizes the "#fields" prefix as a column name, which requires me to manually edit each log file before analyzing it.
      Is there any planned support for custom fields in IIS logs?
      This is an example to the content of my file:
      #Software: IIS Advanced Logging Module
      #Version: 1.0
      #Start-Date: 2013-09-26 17:18:42.257
      #Fields:  CPU-Utilization W3WP-PrivateBytes s-port s-ip cs(User-Agent) cs-uri-stem cs-uri-query sc-status
      12.64 28733440 80 ::1 "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" /CPUThrottling/ - 200
      12.64 28733440 80 ::1 "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" /CPUThrottling/Scripts/jquery-1.8.2.js - 304
      12.64 28733440 80 ::1 "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" /CPUThrottling/Content/site.css - 304
    • Hi Ido,
      Fixed in latest version uploaded today:
31 - 40 of 68 Items