Home / server / Questions / 108326
Accepted
Josh
Asked: 2010-02-02 06:59:56 +0800 CST

LogParser query to grab only external IP addresses from IIS logs?

  • 772

I'm working on a public website that is used by both external visitors and internal employees. I'm after the external visitor hits, but I can't think of a good way to filter out the internal IP ranges.

Using LogParser, what is the best way to filter IISW3C logs by IP range?

This is all I've come up with so far, which can't possibly be the best or most efficient way.

WHERE [c-ip] NOT LIKE (10.10.%, 10.11.%)

Any help is appreciated.

log-files iis logparser

2 Answers

  1. Best Answer

    After a lot of looking, I ended up using what I listed in the question. I still don't think it is the most efficient, but it works and is readable.

    WHERE [c-ip] NOT LIKE (10.10.%, 10.11.%)
    • 1

  2. I always recommend this page from SecurityFocus for parsing log files with LogParser.

    • 0