NCSA Input Format Examples

Slice Request field into components

Return the verb, URI, and HTTP version for each request:

LogParser "SELECT EXTRACT_TOKEN(Request, 0, ' ') AS Verb, EXTRACT_TOKEN(Request, 1, ' ') AS URI, EXTRACT_TOKEN(Request, 2, ' ') AS Version FROM ncsa9.log"

Top 20 URL's for a Site

Create a chart containing the TOP 20 URL's in the "www.margiestravel.com" web site (assumed to be logging in the NCSA log format):

LogParser "SELECT TOP 20 EXTRACT_TOKEN(Request, 1, ' ') AS URI, COUNT(*) AS Hits INTO MyChart.gif FROM <www.margiestravel.com> GROUP BY URI ORDER BY Hits DESC" -chartType:Column3D -groupSize:1024x768