SELECT
   EXTRACT_TOKEN(cs(Referer), 2, '/') AS Domain,
  COUNT(*) AS [Requests]
INTO
   ReferringDomains.txt
FROM 
   logs\iis\ex*.log
GROUP BY
   Domain
ORDER BY
   Requests
DESC

//Anders