Microsoft Log Parser syntax
Useful for established Log Parser queries and traditional Windows, IIS/W3C and file input formats.
SELECT cs-uri-stem, COUNT(*) AS Hits
FROM ex*.log
GROUP BY cs-uri-stem
Choose the right SQL workflow
Microsoft Log Parser, SQLite and modern automation workflows.
Use the original Microsoft Log Parser provider model through an advanced GUI, or choose newer SQLite and command-line workflows when they better fit the source.
The original foundation
Log Parser Lizard began as a GUI for Microsoft Log Parser.
Microsoft Log Parser 2.2 is a mature command-line query engine for Windows and text-based system data. It can expose Windows Event Logs, IIS and W3C logs, registry data, Active Directory, file-system metadata and other providers as tables that can be filtered and aggregated with SQL.
Although it is an older Microsoft utility, the engine remains useful because of its broad input-provider model and efficient local processing. Log Parser Lizard makes that capability approachable for interactive work.
View Microsoft Log Parser 2.2SQLite-based analysis
Use familiar relational SQL for structured files, joins and modern local analysis.
SELECT status, COUNT(*) AS total
FROM orders
GROUP BY status;Universal Log Parser
A Windows CLI project using SQLite virtual tables and MCP support for automation.
ulogparser.exe -i=EVT
-from="System" -limit=100
Which should I use?
Start with the syntax that matches your source.
Existing Log Parser query
Log Parser-compatible syntax
CSV, JSON or everyday file analysis
SQLite-based workflow
Visual, changing investigation
Log Parser Lizard desktop GUI
Repeatable CLI or agent workflow
Universal Log Parser repository and docs
A visual SQL workspace
Download for Windows →
Use the workflow that fits your source.
Download the current Windows release free.
