locked
Log Parser Studio configuration RRS feed

  • Question

  • Hi, I am trying to start monitoring our exchange 2010 environment and I have found log parser studio, to query exchange.

    Message tracking is enabled in exchange 2010

    Where do I find the log files to add to the "log file manager" so i can run the queries?

    I have added all the log files on:

    C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs

    But the queries don't return any result.

    Any ideas?

    Thanks


    Wednesday, July 18, 2012 10:49 AM

All replies

  • what queries do you have ?

    Remigiusz

    http://Exchangeblog.pl

    Wednesday, July 18, 2012 1:02 PM
  • hi, at the moment i am just testing so i have the queries available in the log parser studio library.

    for example "activeSync report", "activeSync: Top 3 ActiveSync Users"

    I run the log parser from a Hub transport.

    "activeSync: Top 3 ActiveSync Users" Query Below: 

    SELECT TOP 3 cs-username AS UserID, 
    cs(User-Agent) AS DeviceType, 
    cs-uri-stem AS Vdir,
    c-ip AS CLIENT,
    cs-method,
    Count(*)
    FROM '[LOGFILEPATH]'
    WHERE cs-uri-stem LIKE '%Microsoft-Server-ActiveSync%' AND cs-method LIKE 'OPTIONS'
    GROUP BY UserID, DeviceType, Vdir, Client, cs-method
    ORDER BY COUNT(*) DESC

    regards

    Wednesday, July 18, 2012 1:18 PM
  • Hi
       We are not familar with    Log Parser .
       You can post it to IIS forum.
       http://forums.iis.net/1140.aspx

    Terence Yu

    TechNet Community Support

    • Marked as answer by Terence Yu Monday, July 30, 2012 3:03 AM
    • Unmarked as answer by Terence Yu Tuesday, August 7, 2012 6:31 AM
    Thursday, July 19, 2012 6:24 AM