What's New in Log Parser 2.2
New Input and Output Formats:
- XML Input Format
- Reads XML files (requires the Microsoft® XML Parser (MSXML))
- TSV Input Format
- Reads tab- and space- separated values text files
- ADS Input Format
- Reads information from Active Directory objects
- COM Input Format
- Makes it possible to plugin user-implemented custom Input Formats
- REG Input Format
- Reads information from the Windows Registry
- NETMON Input Format
- Makes it possible to parse NetMon .cap capture files
- ETW Input Format
- Reads Event Tracing for Windows log files and live sessions
- CHART Output Format
- Creates chart image files (requires Microsoft Office 2000 or later)
- TSV Output Format
- Writes tab- and space- separated values text files
- SYSLOG Output Format
- Sends information to a SYSLOG server or to a SYSLOG-formatted text file
Improvements to the SQL Engine:
- Exponential performance improvement in SELECT DISTINCT and GROUP BY queries
- "WITH ROLLUP" functionality in the GROUP BY clause
- "DISTINCT" in aggregate functions
- (when no GROUP BY clause is specified)
- "PROPSUM(...) [ ON <fields> ]" and "PROPCOUNT(...) [ ON <fields> ]" aggregate functions
- (these functions calculate the ratio between the SUM or COUNT functions on a field and the SUM or COUNT functions on the same field in a hierarchically higher group)
- New functions:
-
- MOD
- BIT_AND, BIT_OR, BIT_NOT, BIT_XOR, BIT_SHL, BIT_SHR
- EXP10, LOG10
- ROUND, FLOOR
- QNTROUND_TO_DIGIT, QNTFLOOR_TO_DIGIT
- STRREPEAT
- IN_ROW_NUMBER, OUT_ROW_NUMBER
- ROT13
- EXTRACT_FILENAME, EXTRACT_EXTENSION, EXTRACT_PATH
- HEX_TO_ASC, HEX_TO_PRINT, HEX_TO_INT
- HEX_TO_HEX8, HEX_TO_HEX16, HEX_TO_HEX32
- IPV4_TO_INT, INT_TO_IPV4
- HASHSEQ, HASHMD5_FILE
- EXTRACT_PREFIX, EXTRACT_SUFFIX
- STRCNT
- Introduced a "USING" clause for declaring temporary field-expressions
- "BETWEEN" operator in the WHERE and HAVING clauses
- "CASE" (simple-form) statement in the SELECT clause
- ("SELECT CASE myField WHEN 'value1' THEN '0' WHEN 'value2' THEN '1' ELSE '-1' END")
- New date and time formats:
-
- l (milliseconds - lower case 'L')
- n (nanoseconds)
- tt (AM/PM)
- ? (any character)
- Fields and Aliases are now case-insensitive
Improvements to existing Input and Output Formats:
- Added many new parameters to most of the Input and Output Formats
- The NCSA input format now parses also combined and extended NCSA log files
- Added "EventCategoryName" and "Data" fields to the EVT input format
- The "-recurse" options of most input formats now specify a maximum subdirectory recursion level
- The CSV Input and Output Formats now support CSV files with double-quoted strings
- Added "FileVersion", "ProductVersion", "CompanyName", etc. fields to the FS input format
- Allowed '*' and '?' wildcards in the site name specifications for all the IIS input formats
- ("SELECT * FROM <mysite*.com>")
- Allowed URL's as the input path of all text-based input formats
- ("SELECT * FROM http://www.adatum.com/table.csv")
- Allowed use of environment variable names in the TPL output format sections, and added a SYSTEM_TIMESTAMP variable
- Performance improvement in the EVT input format when reading from local and remote event logs
- All the property names of the input and output format COM objects now match the command-line names
General improvements:
- Added the possibility to specify parameters in .sql files
- ("logparser -file:myquery.sql?param1=value1+param2=value2")
- Input I/O performance improvement for text files
- Added the possibility to permanently override the default values of global options, input format options, and output format options
- ("logparser -e:10 -o:NAT -rtp:-1 -savedefaults")
© 2004 Microsoft Corporation. All rights reserved.