What's New in Log Parser 2.2

Log Parser

What's New in Log Parser 2.2

New Input and Output Formats:

XML Input Format
Reads XML files (requires the Microsoft® XML Parser (MSXML))
TSV Input Format
Reads tab- and space- separated values text files
ADS Input Format
Reads information from Active Directory objects
COM Input Format
Makes it possible to plugin user-implemented custom Input Formats
REG Input Format
Reads information from the Windows Registry
NETMON Input Format
Makes it possible to parse NetMon .cap capture files
ETW Input Format
Reads Event Tracing for Windows log files and live sessions
CHART Output Format
Creates chart image files (requires Microsoft Office 2000 or later)
TSV Output Format
Writes tab- and space- separated values text files
SYSLOG Output Format
Sends information to a SYSLOG server or to a SYSLOG-formatted text file

Improvements to the SQL Engine:

Exponential performance improvement in SELECT DISTINCT and GROUP BY queries
"WITH ROLLUP" functionality in the GROUP BY clause
"DISTINCT" in aggregate functions
(when no GROUP BY clause is specified)
"PROPSUM(...) [ ON <fields> ]" and "PROPCOUNT(...) [ ON <fields> ]" aggregate functions
(these functions calculate the ratio between the SUM or COUNT functions on a field and the SUM or COUNT functions on the same field in a hierarchically higher group)
New functions:
  • MOD
  • BIT_AND, BIT_OR, BIT_NOT, BIT_XOR, BIT_SHL, BIT_SHR
  • EXP10, LOG10
  • ROUND, FLOOR
  • QNTROUND_TO_DIGIT, QNTFLOOR_TO_DIGIT
  • STRREPEAT
  • IN_ROW_NUMBER, OUT_ROW_NUMBER
  • ROT13
  • EXTRACT_FILENAME, EXTRACT_EXTENSION, EXTRACT_PATH
  • HEX_TO_ASC, HEX_TO_PRINT, HEX_TO_INT
  • HEX_TO_HEX8, HEX_TO_HEX16, HEX_TO_HEX32
  • IPV4_TO_INT, INT_TO_IPV4
  • HASHSEQ, HASHMD5_FILE
  • EXTRACT_PREFIX, EXTRACT_SUFFIX
  • STRCNT
Introduced a "USING" clause for declaring temporary field-expressions
"BETWEEN" operator in the WHERE and HAVING clauses
"CASE" (simple-form) statement in the SELECT clause
("SELECT CASE myField WHEN 'value1' THEN '0' WHEN 'value2' THEN '1' ELSE '-1' END")
New date and time formats:
  • l (milliseconds - lower case 'L')
  • n (nanoseconds)
  • tt (AM/PM)
  • ? (any character)
Fields and Aliases are now case-insensitive

Improvements to existing Input and Output Formats:

Added many new parameters to most of the Input and Output Formats
The NCSA input format now parses also combined and extended NCSA log files
Added "EventCategoryName" and "Data" fields to the EVT input format
The "-recurse" options of most input formats now specify a maximum subdirectory recursion level
The CSV Input and Output Formats now support CSV files with double-quoted strings
Added "FileVersion", "ProductVersion", "CompanyName", etc. fields to the FS input format
Allowed '*' and '?' wildcards in the site name specifications for all the IIS input formats
("SELECT * FROM <mysite*.com>")
Allowed URL's as the input path of all text-based input formats
("SELECT * FROM http://www.adatum.com/table.csv")
Allowed use of environment variable names in the TPL output format sections, and added a SYSTEM_TIMESTAMP variable
Performance improvement in the EVT input format when reading from local and remote event logs
All the property names of the input and output format COM objects now match the command-line names

General improvements:

Added the possibility to specify parameters in .sql files
("logparser -file:myquery.sql?param1=value1+param2=value2")
Input I/O performance improvement for text files
Added the possibility to permanently override the default values of global options, input format options, and output format options
("logparser -e:10 -o:NAT -rtp:-1 -savedefaults")

© 2004 Microsoft Corporation. All rights reserved.