Field-Expressions

Log Parser

Field-Expressions

<field_expr> ::= <aggregate_function> <function>
<field_name>
<alias>
<value>

Field-expressions are a combination of symbols and functions that Log Parser evaluates to obtain a single data value. These are the basic arguments of the SELECT, USING, WHERE, GROUP BY, HAVING, and ORDER BY clauses.

Field-expressions can be divided conceptually into two groups:


Examples:

A. Basic field-expressions

The SELECT clause in the following example query specifies "basic" field-expressions only:
SELECT 'Event ID:', EventID, SYSTEM_TIMESTAMP()
FROM System

B. Derived field-expressions

The SELECT clause in the following example query specifies "derived" field-expressions only:
SELECT TO_UPPERCASE(cs-uri-stem), SUM(sc-bytes)
FROM \MyLogs\ex042805.log
GROUP BY TO_UPPERCASE(cs-uri-stem)


See also:

Aggregate Functions
Functions
Constant Values
Field Names and Aliases
SELECT
USING

Basics of a Query


© 2004 Microsoft Corporation. All rights reserved.