Logparser - look for certain IP's between a timeframe

Here is  a quick example of pulling certain ip's from the IIS Logs.   

'Specific log file
logparser "select top 10 count(*),c-ip from d:\wwwlogs\w3svc2\u_ex010228.log where to_time(time) between timestamp('01/01 13:50:00', 'MM/dd hh:mm:ss') and timestamp('01/01 14:55:00', 'MM/dd hh:mm:ss') group by c-ip order by count(*) DESC"

'specific website, all open logs.
logparser "select top 10 count(*),c-ip from <example.com> where to_time(time) between timestamp('01/01 13:50:00', 'MM/ ddhh:mm:ss') and timestamp('01/01 14:55:00', 'MM/dd hh:mm:ss') group by c-ip order by count(*) DESC"

Published Thursday, February 28, 2008 2:05 PM by steve schofield
Filed under:

Comments

# Logparser - look for certain IP's between a timeframe - Steve Schofield Weblog

Pingback from  Logparser - look for certain IP's between a timeframe - Steve Schofield Weblog