Log Parser Plus example query
Users logged into IIS 6 FTP site
Parses IIS 6 FTP logs for user accounts who have successfully logged in, and returns the IP(s) used and the number of times they logged in from those IPs.
Keywords:
- iis6ftp
Statement:
Notes: See <a href="http://strivinglife.com/words/post/Using-Log-Parser-to-find-users-accounts-used-to-log-into-an-FTP-site.aspx" rel="external">Using Log Parser to find users accounts used to log into an FTP site</a> for more information.
Leave a comment on this query.
logparser -rtp:-1 "SELECT cs-username, c-ip, count(*) INTO FTPUsersLoggedIn.txt FROM ex1008*.log WHERE sc-status = '230' GROUP BY cs-username, c-ip ORDER BY count(*), cs-username, c-ip"
blog comments powered by Disqus