The <from-entity> specified in
queries using the BIN input format is a comma-separated list of:
Paths of IIS Centralized Binary log files;
IIS Virtual Site "identifiers".
"Site identifiers" must be enclosed within angle brackets (< and
>), and can have one of the following values:
The numeric site ID (e.g. "<1>",
"<28163489>");
The text value of the "ServerComment" property of the site
(e.g. "<My External Site>",
"<www.margiestravel.com>");
The fully-qualified ADSI metabase path to the site (e.g.
"<//MYSERVER/W3SVC/1>"), using either the numeric site ID or
the text value of the "ServerComment" property of the site.
When a "site identifier" is used, the BIN input format connects to
the specified machine's metabase, gathers information on the
server's current logging properties, and parses all the log files
in the server's current log file directory, returning only the
entries corresponding to requests to the specified virtual
site.
Filenames and "Site identifiers" can also include wildcards (e.g.
"LogFiles\ra04*.ibl", "<www.*.com>").
Examples:
FROM LogFiles\ra04*.ibl, LogFiles\ra03*.ibl, \\MyServer\LoggingShare\W3SVC\ra04*.ibl
FROM <1>, <2>, <My External Site>, raw9.ibl
FROM <www.net*home.com>, <//MyServer2/W3SVC/www.net*home.com>, <*>