Question : Need to use Log Parser to extract IP and username of all who have accessed OWA in the last month.

I need to parse all existing W3SVC1 logs.  The report must include the username authenticated, date/time of connection, the IP address that originated the connection.

When I run the command from this post LogParser "SELECT date, time, c-ip, cs-uri-stem, cs(User-Agent)
FROM C:\Windows\System32\LogFiles\W3SVC1\ex*.log TO Output.csv WHERE cs-uri-stem LIKE '%Username%'"

When i run the command i get the following:

Statistics:
-----------
Elements processed: 21208497
Elements output:    0
Execution time:     351.32 seconds (00:05:51.32)

What i assume is happening is that it processes the command but is unable to find data that matches my query so no output file is created.

Any help would be appreciated.

Related Solutions: Log Parser query for OWA connections into report

Answer : Need to use Log Parser to extract IP and username of all who have accessed OWA in the last month.

Here is what worked.

"C:\Program Files (x86)\Log Parser 2.2\LogParser.exe" "SELECT date, time, c-ip, cs-uri-stem, cs-username, cs(User-Agent), cs-uri-query FROM ex1006*.log TO c:\temp\Output.csv WHERE cs-username LIKE '%jdoe%'"