MS Log Parser allows for parsing and analysis based on SQL. Very useful and surprising fast.
Summarize response code
SELECT STRCAT(TO_STRING(sc-status), STRCAT('.', TO_STRING(sc-substatus))) AS Status,
COUNT(*) AS Total
INTO C:\output.csv FROM C:\a.log
GROUP BY Status
ORDER BY Total DESC
Summarize response code by hour
SELECT TO_STRING(time, 'HH') AS Hour, STRCAT(TO_STRING(sc-status), STRCAT('.', TO_STRING(sc-substatus))) AS Status, COUNT(*) AS Total
INTO 'C:\output.csv' FROM C:\a.log
GROUP BY Hour, Status
ORDER BY Hour, Status ASC
Summarize response code by every 5 minutes
SELECT QUANTIZE(time,300) AS Hour, STRCAT(TO_STRING(sc-status), STRCAT('.', TO_STRING(sc-substatus))) AS Status, COUNT(*) AS Total
INTO 'C:\output.csv' FROM 'D:\input.log'
GROUP BY Hour, Status
ORDER BY Hour, Status ASC
Python Aided Work 
0 Responses to “Using MS Log Parser for IIS log analysis”