none
Exchange 2007 Server and Log Parser Query RRS feed

  • Question

  • Hello,

        I need to run this query on Windows server 2003 x64 using logparser but I cannot as it ends up the error

    Logparser.exe  "Select TOP 5000 TO_TIMESTAMP(TO_DATE(date), TO_TIME(time)) as [Time],
    cs-username as [User],
    cs(user-agent) as DeviceID,
    TO_INT(EXTRACT_PREFIX(EXTRACT_SUFFIX(cs-uri-query, 0, '_RpcC'), 0, '_')) As RPCCount,
    sc-status as Status,
    sc-substatus as SubStatus,
    sc-bytes as [Bytes],
    DIV(sc-bytes, 1024) AS [KBytes], time-taken, DIV(time-taken, 1000) as Sec, cs-uri-query
    FROM 'C:\Windows\system32\LogFiles\W3SVC1'
    WHERE
    RPCCount > 2000 /* <-- Change RPC count as needed */
    AND cs-uri-query LIKE '%Cmd=Sync%'
    AND cs-uri-query LIKE '%Ty:Co%'
    ORDER BY [Bytes] DESC"

    https://support.microsoft.com/en-us/help/2711053/high-cpu-usage-when-you-synchronize-a-mobile-device-to-an-exchange-ser

    C:\Program Files (x86)\Log Parser 2.2>LogParser.exe "Select TOP 5000 TO_TIMESTAM
    P(TO_DATE(date), TO_TIME(time)) as [Time],
    Error: Syntax Error: <field-expr>: cannot find a valid <field-expr>: ''


    http://www.arabitpro.com


    Monday, October 21, 2019 5:55 AM

All replies