Microsoft Log Parser

• Log Parser
  • What's New in Log Parser 2.2
  • Conceptual Overview
    • Log Parser Architecture
    • Records
    • Commands and Queries
    • Errors, Parse Errors, and Warnings
  • Writing a Query
    • Basics of a Query
    • Filtering Input Records
    • Sorting Output Records
    • Aggregating Data Within Groups
      • Calculating Percentages
    • Filtering Groups
    • Additional Tasks
      • Eliminating Duplicate Values
      • Retrieving a Fixed Number of Records
      • Improving Query Readability
  • Advanced Features
    • Parsing Input Incrementally
    • Multiplexing Output Records
    • Converting File Formats
    • Custom Plugins
    • Overriding Defaults
  • Log Parser COM API Overview
    • JScript/VBScript Examples
    • C# Example
  • Examples
  • Security Considerations
  • Frequently Asked Questions
  • Reference
    • Query Syntax
      • SELECT
      • USING
      • INTO
      • FROM
      • WHERE
      • GROUP BY
      • HAVING
      • ORDER BY
      • Expressions
        • ALL
        • ANY
        • BETWEEN
        • IN
        • LIKE
      • Field-Expressions
      • Field Names and Aliases
      • Aggregate Functions
        • AVG
        • COUNT
        • GROUPING
        • MAX
        • MIN
        • PROPCOUNT
        • PROPSUM
        • SUM
      • Functions
        • ADD
        • BIT_AND
        • BIT_NOT
        • BIT_OR
        • BIT_SHL
        • BIT_SHR
        • BIT_XOR
        • CASE
        • COALESCE
        • COMPUTER_NAME
        • DIV
        • EXP
        • EXP10
        • EXTRACT_EXTENSION
        • EXTRACT_FILENAME
        • EXTRACT_PATH
        • EXTRACT_PREFIX
        • EXTRACT_SUFFIX
        • EXTRACT_TOKEN
        • EXTRACT_VALUE
        • FLOOR
        • HASHMD5_FILE
        • HASHSEQ
        • HEX_TO_ASC
        • HEX_TO_HEX16
        • HEX_TO_HEX32
        • HEX_TO_HEX8
        • HEX_TO_INT
        • HEX_TO_PRINT
        • INDEX_OF
        • INT_TO_IPV4
        • IN_ROW_NUMBER
        • IPV4_TO_INT
        • LAST_INDEX_OF
        • LOG
        • LOG10
        • LTRIM
        • MOD
        • MUL
        • OUT_ROW_NUMBER
        • QNTFLOOR_TO_DIGIT
        • QNTROUND_TO_DIGIT
        • QUANTIZE
        • REPLACE_CHR
        • REPLACE_IF_NOT_NULL
        • REPLACE_STR
        • RESOLVE_SID
        • REVERSEDNS
        • ROT13
        • ROUND
        • RTRIM
        • SEQUENCE
        • SQR
        • SQRROOT
        • STRCAT
        • STRCNT
        • STRLEN
        • STRREPEAT
        • STRREV
        • SUB
        • SUBSTR
        • SYSTEM_DATE
        • SYSTEM_TIME
        • SYSTEM_TIMESTAMP
        • SYSTEM_UTCOFFSET
        • TO_DATE
        • TO_HEX
        • TO_INT
        • TO_LOCALTIME
        • TO_LOWERCASE
        • TO_REAL
        • TO_STRING
        • TO_TIME
        • TO_TIMESTAMP
        • TO_UPPERCASE
        • TO_UTCTIME
        • TRIM
        • URLESCAPE
        • URLUNESCAPE
        • WIN32_ERROR_DESCRIPTION
      • Constant Values
      • Comments
    • Data Types
      • INTEGER
      • REAL
      • STRING
      • TIMESTAMP
        • Timestamp Format Specifiers
      • NULL
    • Input Formats
      • ADS
        • From-Entity Syntax
        • Fields
        • Parameters
        • Examples
      • BIN
        • From-Entity Syntax
        • Fields
        • Examples
      • COM
        • From-Entity Syntax
        • Fields
        • Parameters
        • Examples
      • CSV
        • From-Entity Syntax
        • Fields
        • Parameters
        • Examples
      • ETW
        • From-Entity Syntax
        • Fields
        • Parameters
        • Examples
      • EVT
        • From-Entity Syntax
        • Fields
        • Parameters
        • Examples
      • FS
        • From-Entity Syntax
        • Fields
        • Parameters
        • Examples
      • HTTPERR
        • From-Entity Syntax
        • Fields
        • Parameters
        • Examples
      • IIS
        • From-Entity Syntax
        • Fields
        • Parameters
        • Examples
      • IISODBC
        • From-Entity Syntax
        • Fields
        • Examples
      • IISW3C
        • From-Entity Syntax
        • Fields
        • Parameters
        • Examples
      • NCSA
        • From-Entity Syntax
        • Fields
        • Parameters
        • Examples
      • NETMON
        • From-Entity Syntax
        • Fields
        • Parameters
        • Examples
      • REG
        • From-Entity Syntax
        • Fields
        • Parameters
        • Examples
      • TEXTLINE
        • From-Entity Syntax
        • Fields
        • Parameters
        • Examples
      • TEXTWORD
        • From-Entity Syntax
        • Fields
        • Parameters
        • Examples
      • TSV
        • From-Entity Syntax
        • Fields
        • Parameters
        • Examples
      • URLSCAN
        • From-Entity Syntax
        • Fields
        • Parameters
        • Examples
      • W3C
        • From-Entity Syntax
        • Fields
        • Parameters
        • Examples
      • XML
        • From-Entity Syntax
        • Fields
        • Parameters
        • Examples
    • Output Formats
      • CHART
        • Configuration Scripts
        • Into-Entity Syntax
        • Parameters
        • Examples
      • CSV
        • Into-Entity Syntax
        • Parameters
        • Examples
      • DATAGRID
        • Into-Entity Syntax
        • Parameters
        • Examples
      • IIS
        • Into-Entity Syntax
        • Parameters
        • Examples
      • NAT
        • Into-Entity Syntax
        • Parameters
        • Examples
      • SQL
        • Column Type Mappings
        • Into-Entity Syntax
        • Parameters
        • Examples
      • SYSLOG
        • Message Structure
        • Configuration Files
        • Into-Entity Syntax
        • Parameters
        • Examples
      • TPL
        • Template Files
        • Into-Entity Syntax
        • Parameters
        • Examples
      • TSV
        • Into-Entity Syntax
        • Parameters
        • Examples
      • W3C
        • Into-Entity Syntax
        • Parameters
        • Examples
      • XML
        • Document Structures
        • Into-Entity Syntax
        • Parameters
        • Examples
    • Command-Line Operation
      • Query Execution Mode
      • Conversion Mode
      • Default Override Mode
      • Help Mode
      • Global Switches
    • COM API
      • LogQuery Object
        • Methods
          • Execute Method
          • ExecuteBatch Method
        • Properties
          • errorMessages Property
          • inputUnitsProcessed Property
          • lastError Property
          • maxParseErrors Property
          • outputUnitsProcessed Property
          • versionMaj Property
          • versionMin Property
      • LogRecordSet Object
        • Methods
          • atEnd Method
          • close Method
          • getColumnCount Method
          • getColumnName Method
          • getColumnType Method
          • getRecord Method
          • moveNext Method
        • Properties
          • errorMessages Property
          • inputUnitsProcessed Property
          • lastError Property
          • INTEGER_TYPE Property
          • NULL_TYPE Property
          • REAL_TYPE Property
          • STRING_TYPE Property
          • TIMESTAMP_TYPE Property
      • LogRecord Object
        • Methods
          • getValue Method
          • getValueEx Method
          • isNull Method
          • toNativeString Method
      • Input Format Objects
      • Output Format Objects
    • COM Input Format Plugins
      • ILogParserInputContext Interface
        • Methods
          • CloseInput Method
          • GetFieldCount Method
          • GetFieldName Method
          • GetFieldType Method
          • GetValue Method
          • OpenInput Method
          • ReadRecord Method
        • Properties
          • Custom Properties
      • Run Time Interaction