This handy utility lets you query logs just like SQL:
LogParser – Download LogParser.
Running this from the command line tells me which pages are getting 500 errors:
LogParser.exe "SELECT cs-uri-stem, count(*) FROM ex*.log where sc-status=500 group by cs-uri-stem"
Where ‘ex*.log’ are all my IIS log files…
Forensic Log Parsing with Microsoft’s LogParser – covers some useful samples for identifying suspicious activity in your IIS logs.
Post a Comment