Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 19 guests and 1 member online
EH-Net Donations

Enter Amount:
$

Google Ads
ChicagoCon 2008f
chicagocon2008f_125x200banner.jpg
ChicagoCon 2008f
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Forensicsarrow Remote IIS Log Parsing by Specifying a full IIS Metabase Path
Ethical Hacker Community Forums
August 30, 2008, 11:55:19 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Registration Now Open for ChicagoCon 2008f Oct 27 - Nov 2! Visit www.chicagocon.com.
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Remote IIS Log Parsing by Specifying a full IIS Metabase Path  (Read 525 times)
0 Members and 1 Guest are viewing this topic.
Manu Zacharia (-M-)
Full Member
***
Offline Offline

Posts: 181



View Profile WWW
« on: July 27, 2008, 06:47:52 AM »

Hi All,

Need some help with Log Parser.

Log Analysis for IIS Log Files using Log Parser can be done in 2 ways:
  • By specifying the paths to the log files, or
  • By spedifying the ID number of a virtual IIS site

If we want to parse the log file of the site with ID 1 (the default Web site) from the local system running IIS, the command is:

Code:
logparser -i:IISW3C -o:NAT "SELECT date, time, csi-uri-stem FROM <1>"

To do the same from a remote machine running Log Parser, the command is (according to Microsoft Log Parser Toolkit by Gabriele Giuseppini):

Code:
logparser -i:IISW3C -o:NAT "SELECT date, time, csi-uri-stem FROM </MYSERVER2/W3SVC/1>"

However, whey I follow the command, I get the following error:

Code:
C:\Program Files\Log Parser 2.2>logparser -i:IISW3C -o:NAT "SELECT date FROM </i
nfra1/W3SVC/1>"
Error: The specified FROM-ENTITY is not a filename, a Metabase path nor a ODBC s
pecification: Error creating the IMSAdminBase object on machine infra1: The spec
ified module could not be found.

C:\Program Files\Log Parser 2.2>
What could be wrong? What is the right format to parse remote IIS logs by specifying a full IIS metabase path?
Logged

Manu Zacharia
Certified ISO 27001:2005 (Information Security Management System) Lead Auditor
Promote the Information Security Day
Visit - http://www.informationsecurityday.com
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.5 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.035 seconds with 22 queries.
 
Polls
Best for daily desktop use:
 
Support EH-Net
chicagocon2008f_125x200banner.jpg
ChicagoCon 2008f


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

Sadikhov.com
Top IT Cert Sites

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

chicagocon2008f_125x200banner.jpg
ChicagoCon 2008f
 
         
Advertisement

© 2008 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.