Log Parser Plus

Syntax

<field_expr> <rel_op> ALL ( <value_rows> ) | ( <field_expr_list> ) <rel_op> ALL ( <value_rows> )

Description

The ALL operator compares a given field-expression with a list of values, returning TRUE if all values in the list satisfy the comparison operation, or FALSE if not all values satisfy the comparison.

Syntax

<field_expr> <rel_op> ANY ( <value_rows> ) | ( <field_expr_list> ) <rel_op> ANY ( <value_rows> )

Description

The ANY operator compares a given field-expression with a list of values, returning TRUE if any value in the list satisfies the comparison operation, or FALSE if no values satisfy the comparison.

Syntax

<field_expr> [ NOT ] BETWEEN <field_expr> AND <field_expr>

Description

The BETWEEN operator determines if a given field-expression belongs to a specified interval.

Examples

• sc-status BETWEEN 400 AND 499
  Returns requests with a status code from 400 to 499, inclusive.

Syntax

<field_expr> [ NOT ] IN ( <value_rows> ) | ( <field_expr_list> ) [ NOT ] IN ( <value_rows> )

Description

The IN and NOT IN operators determine whether or not a given field-expression or list of field-expressions matches any element in a list of values.

Examples

• EXTRACT_EXTENSION(cs-uri-stem) NOT IN ('jpg';'png';'gif';'ico')
  When used in a WHERE clause, excludes requests for common image formats.
• See Removing potential bots from query results for an example using a nested query.

Syntax

<field_expr> [ NOT ] LIKE <like_mask>

Description

Determines whether or not a given character string matches a specified pattern. A pattern can include regular characters and wildcard characters. During pattern matching, regular characters must yield a case-insensitive match with the characters specified in the character string. Wildcard characters, however, can be matched with arbitrary fragments of the character string. Using wildcard characters makes the LIKE operator more flexible than using the = and != string comparison operators. _ (underscore) matches any single character, while % (percent) matches any string of zero or more characters.