{"id":273,"date":"2016-03-30T12:55:10","date_gmt":"2016-03-30T10:55:10","guid":{"rendered":"http:\/\/blogs.msdn.microsoft.com\/lavanack\/?p=273"},"modified":"2022-05-30T13:50:04","modified_gmt":"2022-05-30T11:50:04","slug":"logparser-your-best-friend","status":"publish","type":"post","link":"https:\/\/laurentvanacker.com\/index.php\/2016\/03\/30\/logparser-your-best-friend\/","title":{"rendered":"Besoin d&rsquo;analyser vos logs IIS ? LogParser est votre meilleur ami ! \/ Need to analyse your IIS log files? LogParser is your best friend !"},"content":{"rendered":"<div id=\"fr-FR\"><a href=\"#en-US\">English version<\/a><\/div>\n<p>[MAJ 01\/03\/2017] Est-il encore besoin de pr\u00e9senter <a href=\"https:\/\/en.wikipedia.org\/wiki\/Logparser\" target=\"_blank\" rel=\"noopener noreferrer\">LogParser<\/a> ? Cet outil en ligne de commandes est un veritable couteau suisse et permet d&rsquo;analyser une multitude de formats de fichier (Log IIS, fichier XML, Traces venant de Network Monitor, Traces ETW, &#8230;). Certes il existe d&rsquo;excellents outils tel que <a href=\"http:\/\/blogs.technet.com\/b\/exchange\/archive\/2013\/06\/17\/log-parser-studio-2-2-is-now-available.aspx\" target=\"_blank\" rel=\"noopener noreferrer\">LogParserStudio<\/a> auquel mes coll\u00e8gues de l&rsquo;\u00e9quipe support IIS\/Azure France ont m\u00eame consacr\u00e9 un <a href=\"https:\/\/blogs.msdn.microsoft.com\/friis\/2014\/02\/06\/how-to-analyse-iis-logs-using-logparser-logparser-studio\/\" target=\"_blank\" rel=\"noopener noreferrer\">article<\/a> mais il faut l&rsquo;avouer je suis assez \u00ab\u00a0old school\u00a0\u00bb et je pr\u00e9f\u00e9re directement utiliser l&rsquo;outil de base plut\u00f4t qu&rsquo;une surcouche (m\u00eame si je le r\u00e9p\u00e8te l&rsquo;outil semble tr\u00e8s bien fait).<\/p>\n<p>Dans le cadre d&rsquo;une analyse des logs IIS le temps consacr\u00e9 pour se familiariser avec LogParser (j&rsquo;estime \u00e0 moins de 4 heures en partant de z\u00e9ro) me semble d\u00e9risoire par rapport au retour sur investissement lors de vos phases de troubleshooting. De mani\u00e8re \u00e0 encore acc\u00e9lerer votre apprentissage, j&rsquo;ai d\u00e9cid\u00e9 de vous livrer les requ\u00eates LogParser que j&rsquo;utilise le plus fr\u00e9quement lors de mes visites clients d\u00e9di\u00e9es \u00e0 des probl\u00e9matiques IIS. Pour cela vous aurez besoin de <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=24659\" target=\"_blank\" rel=\"noopener noreferrer\">LogParser 2.2<\/a> et de <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=22276\" target=\"_blank\" rel=\"noopener noreferrer\">Office 2003 Add-in: Office Web Components<\/a> (Et oui on va g\u00e9n\u00e9rer des graphiques avec LogParser !). Je recommande d&rsquo;ailleur d&rsquo;installer <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=24659\" target=\"_blank\" rel=\"noopener noreferrer\">LogParser 2.2<\/a> sur tous vos serveurs IIS de mani\u00e8re \u00e0 pouvoir sortir rapidement un \u00e9tat des lieux des requ\u00eates en cas de probl\u00e8me. Pour <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=22276\" target=\"_blank\" rel=\"noopener noreferrer\">Office 2003 Add-in: Office Web Components<\/a>\u00a0 par contre, installez le uniquement sur votre poste de travail (sans oublier <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=24659\" target=\"_blank\" rel=\"noopener noreferrer\">LogParser 2.2<\/a>) car il est pr\u00e9f\u00e9rable de g\u00e9nerer vos graphiques sur votre poste de travail et d&rsquo;installer le minimum de composants sur un serveur de production.<\/p>\n<p>Nous supposerons pour des facilit\u00e9s de lecture que Logparser.exe est accessible depuis n&rsquo;importe o\u00f9 (ie. le chemin d&rsquo;installation est pr\u00e9sent dans votre variable d&rsquo;environnement PATH)<\/p>\n<div id=\"scid:9D7513F9-C04C-4721-824A-2B34F0212519:749f2615-cb23-4d7e-86d9-69a8cdea8f90\" class=\"wlWriterEditableSmartContent\" style=\"float: none; margin: 0px; padding: 0px;\"><\/div>\n<p>Le fichier <a href=\"https:\/\/github.com\/lavanack\/laurentvanacker.com\/tree\/master\/Command%20Prompt\/IIS\/Log\/LogParser\/Top%20Queries\/LogParserScript.js\" target=\"_blank\" rel=\"noopener noreferrer\">LogParserScript.js<\/a> r\u00e9f\u00e9renc\u00e9 dans quelques lignes qui pr\u00e9c\u00e9dent est disponible <a href=\"https:\/\/github.com\/lavanack\/laurentvanacker.com\/tree\/master\/Command%20Prompt\/IIS\/Log\/LogParser\/Top%20Queries\/LogParserScript.js\" target=\"_blank\" rel=\"noopener noreferrer\">ici<\/a> (ne sert que pour les graphiques)<\/p>\n<p>Toutes les requ\u00eates peuvent \u00eatre t\u00e9l\u00e9charg\u00e9es <a title=\"https:\/\/msdnshared.blob.core.windows.net\/media\/2017\/03\/LogParserQueries.cmd_.txt\" href=\"https:\/\/github.com\/lavanack\/laurentvanacker.com\/tree\/master\/Command%20Prompt\/IIS\/Log\/LogParser\/Top%20Queries\/LogParserQueries.cmd\">ici<\/a>.<\/p>\n<hr \/>\n<div id=\"en-US\"><a href=\"#fr-FR\">Version fran\u00e7aise<\/a><\/div>\n<p>[Updated 03\/01\/2017] Does it still need to present <a href=\"https:\/\/en.wikipedia.org\/wiki\/Logparser\" target=\"_blank\" rel=\"noopener noreferrer\">LogParser<\/a>? This command line tool is a real Swiss Army knife and analyzes a multitude of file formats (IIS Log files, XML files, Network Monitor traces, ETW traces, &#8230;). There are excellent tools such as <a href=\"http:\/\/blogs.technet.com\/b\/exchange\/archive\/2013\/06\/17\/log-parser-studio-2-2-is-now-available.aspx\" target=\"_blank\" rel=\"noopener noreferrer\">LogParserStudio<\/a> for which my colleagues in the French IIS\/Azure Support Team have even devoted an <a href=\"https:\/\/blogs.msdn.microsoft.com\/friis\/2014\/02\/06\/how-to-analyse-iis-logs-using-logparser-logparser-studio\/\" target=\"_blank\" rel=\"noopener noreferrer\">article<\/a> but I must admit I&rsquo;m pretty \u00ab\u00a0old school\u00a0\u00bb and I prefer use directly this tool rather than an wrapper (although I repeat the tool seems very well done).<\/p>\n<p><span title=\"Dans le cadre d'une analyse des logs IIS le temps consacr\u00e9 pour se familiariser avec LogParser (j'estime \u00e0 moins de 4 heures en partant de z\u00e9ro) me semble d\u00e9risioire par rapport au retour sur investissement lors de vos phases de troubleshooting.\">As part of an IIS logs analysis the time spent to learn LogParser (I estimate at less than 4 hours from scratch) seems paltry compared to the return on investment when you will troubleshoot your IIS servers. <\/span><span title=\"De mani\u00e8re \u00e0 encore acc\u00e9lerer votre apprentissage, j'ai d\u00e9cid\u00e9 de vous livrer les requ\u00eates LogParser que j'utilise le plus fr\u00e9quement lors de mes visites clients d\u00e9di\u00e9es \u00e0 des probl\u00e9matiques IIS.\">In order to further accelerate your learning, I have decided to give you the LogParser queries that I use most often during my customer onsites related to IIS issues. <\/span><span title=\"Pour cela vous aurez besoin de LogParser 2.2 et de Office 2003 Add-in: Office Web Components (Et oui on va g\u00e9n\u00e9rer des graphiques avec LogParser !).\">For this you will need <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=24659\" target=\"_blank\" rel=\"noopener noreferrer\">LogParser 2.2<\/a> and <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=22276\" target=\"_blank\" rel=\"noopener noreferrer\">Office 2003 Add-in: Office Web Components<\/a> (And yes we will generate graphs with LogParser!). <\/span><span title=\"Je recommande d'ailleur d'installer LogParser 2.2 sur tous vos serveurs IIS de mani\u00e8re \u00e0 pouvoir rapidement sortir rapidement un \u00e9tat des lieux de vos requ\u00eates en cas de probl\u00e8me.\">BTW I recommend installing <span title=\"Pour cela vous aurez besoin de LogParser 2.2 et de Office 2003 Add-in: Office Web Components (Et oui on va g\u00e9n\u00e9rer des graphiques avec LogParser !).\"><a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=24659\" target=\"_blank\" rel=\"noopener noreferrer\">LogParser 2.2<\/a><\/span> on all of your IIS servers so you can quickly generate an IIS report of the requests in case of problems. For <\/span><span title=\"Pour Office 2003 Add-in: Office Web Components par contre, installez le uniquement sur votre poste de travail (sans oublier LogParser 2.2) car il est pr\u00e9f\u00e9rable de g\u00e9nerer vos graphiques sur votre poste de travail et d'installer le minimum de composants sur un\"><span title=\"Pour cela vous aurez besoin de LogParser 2.2 et de Office 2003 Add-in: Office Web Components (Et oui on va g\u00e9n\u00e9rer des graphiques avec LogParser !).\"><a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=22276\" target=\"_blank\" rel=\"noopener noreferrer\">Office 2003 Add-in: Office Web Components<\/a><\/span> I recommend to install only on your computer (don&rsquo;t forget to install also <span title=\"Pour cela vous aurez besoin de LogParser 2.2 et de Office 2003 Add-in: Office Web Components (Et oui on va g\u00e9n\u00e9rer des graphiques avec LogParser !).\"><a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=24659\" target=\"_blank\" rel=\"noopener noreferrer\">LogParser 2.2<\/a><\/span>) because it is preferable to generate your charts on your desktop and install the minimum components on a <\/span><span title=\"serveur de production.\">production server.<\/span><\/p>\n<p>We assume to facilitate the reading that LogParser.exe is accessible from anywhere (ie. The installation path is in your PATH environment variable)<\/p>\n<div id=\"scid:9D7513F9-C04C-4721-824A-2B34F0212519:6f358cb7-9f2f-499a-a073-ea1455abff6d\" class=\"wlWriterEditableSmartContent\" style=\"float: none; margin: 0px; padding: 0px;\"><\/div>\n<p>The file <a href=\"https:\/\/github.com\/lavanack\/laurentvanacker.com\/tree\/master\/Command%20Prompt\/IIS\/Log\/LogParser\/Top%20Queries\/LogParserScript.js\" target=\"_blank\" rel=\"noopener noreferrer\">LogParserScript.js<\/a> (used in some lines above) is available <a href=\"https:\/\/github.com\/lavanack\/laurentvanacker.com\/tree\/master\/Command%20Prompt\/IIS\/Log\/LogParser\/Top%20Queries\/LogParserScript.js\" target=\"_blank\" rel=\"noopener noreferrer\">here<\/a> (only used for the chart generation)<\/p>\n<p style=\"text-align: justify;\">All the requests can be downloaded <a title=\"https:\/\/msdnshared.blob.core.windows.net\/media\/2017\/03\/LogParserQueries.cmd_.txt\" href=\"https:\/\/github.com\/lavanack\/laurentvanacker.com\/tree\/master\/Command%20Prompt\/IIS\/Log\/LogParser\/Top%20Queries\/LogParserQueries.cmd\">here<\/a>.<\/p>\n<p style=\"text-align: justify;\">Laurent.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>English version [MAJ 01\/03\/2017] Est-il encore besoin de pr\u00e9senter LogParser ? Cet outil en ligne de commandes est un veritable couteau suisse et permet d&rsquo;analyser [&#8230;]<\/p>\n","protected":false},"author":2,"featured_media":2465,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7,18],"tags":[25,55,30],"class_list":["post-273","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-iis","category-ms-dos","tag-iis","tag-logparser","tag-ms-dos"],"_links":{"self":[{"href":"https:\/\/laurentvanacker.com\/index.php\/wp-json\/wp\/v2\/posts\/273","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/laurentvanacker.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/laurentvanacker.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/laurentvanacker.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/laurentvanacker.com\/index.php\/wp-json\/wp\/v2\/comments?post=273"}],"version-history":[{"count":8,"href":"https:\/\/laurentvanacker.com\/index.php\/wp-json\/wp\/v2\/posts\/273\/revisions"}],"predecessor-version":[{"id":2926,"href":"https:\/\/laurentvanacker.com\/index.php\/wp-json\/wp\/v2\/posts\/273\/revisions\/2926"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/laurentvanacker.com\/index.php\/wp-json\/wp\/v2\/media\/2465"}],"wp:attachment":[{"href":"https:\/\/laurentvanacker.com\/index.php\/wp-json\/wp\/v2\/media?parent=273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/laurentvanacker.com\/index.php\/wp-json\/wp\/v2\/categories?post=273"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/laurentvanacker.com\/index.php\/wp-json\/wp\/v2\/tags?post=273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}