View Image

Log Parser Lizard is a log parsing and data querying desktop tool. Designed to support information security teams with powerful SQL querying against structured log data such as web server logs, Windows system events, application log files (log4j, log4net, nlog, serilog), CSV, TSV, JSON, XML, etc. LPL can also query databases on remote servers such as Microsoft SQL Server, SQLite, MySQL, OLE DB and many other data sources. LPL also provides a great Graphical User Interface (GUI) to Microsoft Log parser 2.2, an advanced file parsing engine from Microsoft that runs on all versions of Windows.LPL is great for data visualization, business intelligence (BI), reporting and extract, transform, load tasks (ETL) too. Run SQL queries against plain text files and other sources just as you would any SQL compliant database: SELECT DISTINCT src-ip FROM firewall.log WHERE action='DROP' SELECT TOP 100 * FROM c:webserver.log WHERE sc-status = 501 SELECT cs-uri-stem, COUNT(*) FROM c:InetPubLogsex*.log GROUP BY cs-uri-stem SELECT to_lowercase(extract_extension(cs-uri-stem)) AS PageType, SUM(sc-bytes) FROM ex131118.log, ex131119.log GROUP BY PageType LPL is a simple desktop utility for enterprise grade-data mining. No cloud or web server needed. Any file is a database with Log Parser Lizard.