I am trying to run a query against my IIS6 SMTP Server log files. The logs are in extended W3C.
I am running the command:
logparser "select sc-status,count(sc-status) from x:\smtplogs\smtpsvc1\ex051229.log group by sc-status"
The output looks like:
sc-status COUNT(ALL sc-status)
--------- --------------------
250 2317
240 1561
0 2263
Statistics:
-----------
Elements processed: 6141
Elements output: 3
Execution time: 0.03 seconds
Things I know about the log file I am parsing:
1. The log file I am parsing against has an sc-status "591" for at least one of the messages it was trying to send.
So, what am I missing here?