Logparser for Exchange Message Tracking

Version 2/22/2005 - In working condition

Logparser is quite cool. It will allow you to take basically any log file and parse it into another format or even to a database!
Visit the LogPaser site for more info or download version 2.2 here

This page is here to generate a handy batch program based on LogParser 2.2 to parse those nasty Exchange Message Tracking logs into something more managable.
First, it converts the seperate files into one tab-seperated file, merges the date and time field into a single field and renames some of the field names to something more database friendly. After that, you can do with the file as you please. I hope to, at some point, come up with a statement to import the data into Access or SQL server.
Until then, I hope that you find this page usefull. I sure think it is :-)
If you have any comments of suggestions, drop me a note at parcival@gmail.com

This program assumes that your exchange log files are stored in the following format:
W3C (exchange 2000+)
Filenames are based on yyyyMMdd.log
Click here for an example of what this form generates.

Startdate:	* (enter a valid date)
Enddate:	* (enter a valid date)
The filename that you want to the files to be put into:	.tab* (enter a target filename)
Overwrite existing file?	Yes No
Generate for batch?	Yes No
Turn off Echo in batch files?	Yes No
By using the defaults below, I was able to compact 800MB's of logs into 135MB which makes it suitable to load into access.
Remove Duplicates?	Yes No

Fields to include:

Date/Time

client-ip

Client-hostname

Partner-Name

Server-hostname

server-IP

Recipient-Address
Filter out non-smtp recipients: Yes or No

Event-ID

MSGID

Priority

Recipient-Report-Status

total-bytes

Number-Recipients

Origination-Time

Encryption

service-Version

Linked-MSGID

Message-Subject
Filter out this subject: (I don't really care about the virus notifications I receive in email)

Sender-Address

Path to Exchange Logs: 20050101.log
- Enter either a local or UNC path without spaces. If you leave this blank, the script will search for the files in the current directory.
Path to logparser executable: LogParser.exe

Fields marked with a * are required.