Visual Log Parser 사용법

출처: Wssplex

다운로드: http://en.serialcoder.net/logiciels/visual-logparser.aspx

Log Parser 2.2: http://www.microsoft.com/downloads/details.aspx?FamilyID=890cd06b-abf8-4c25-91b2-f8d975cf8c07&displaylang=en

.Net FrameWork2.0 필요

- 이벤트로그 쿼리, 이벤트 소스별 이벤트 ID 의 각 % 점유율
SELECT SourceName,
EventID,
MUL(PROPCOUNT(*) ON (SourceName), 100.0) AS Percent
FROM System
GROUP BY SourceName, EventID
ORDER BY SourceName, Percent DESC

- 파일시스템 쿼리, 이름별 갯수
SELECT STRLEN(Name) AS NameLen,
COUNT(*) AS Total
FROM C:\*.*
GROUP BY NameLen
ORDER BY Total

- 레지스트리 쿼리, HKLM 클래스의 최상위 5개 키
Select top 5 * from \HKLM

- IIS로그 쿼리
- 상태코드 400 이상인 페이지 조회
SELECT cs-uri-stem AS Url, sc-status AS Status, COUNT(*) AS Errors
FROM ex*.log
WHERE (sc-status >= 400)
GROUP BY Url, Status
ORDER BY Errors DESC

- win32 오류 페이지 조회

SELECT cs-uri-stem AS Url,
WIN32_ERROR_DESCRIPTION(sc-win32-status) AS Error, Count(*) AS Total
FROM ex*.log
WHERE (sc-win32-status > 0)
GROUP BY Url, Error
ORDER BY Total DESC


- 오류가 난 Asp 페이지 쿼리
SELECT EXTRACT_TOKEN(FullUri, 0, '|') AS Uri,
EXTRACT_TOKEN(cs-uri-query, -1, '|') AS ErrorMsg,
EXTRACT_TOKEN(cs-uri-query, 1, '|') AS LineNo,
COUNT(*) AS Total
USING STRCAT( cs-uri-stem,
REPLACE_IF_NOT_NULL(cs-uri-query, STRCAT('?', cs-uri-query))
) AS FullUri
FROM ex*.log
WHERE (sc-status = 500) AND (cs-uri-stem LIKE '%.asp')
GROUP BY Uri, ErrorMsg, LineNo
ORDER BY Total DESC