http://blogs.msdn.com/b/mohamed_el_ashmawi/archive/2011/09/27/sharepoint-2010-capacity-management-log-parser-part-2.aspxAs mentioned in my previous post, you should run the log parser on logs for a specific day. You can do that by copying the log files from the different load balanced Front-end servers to a centralized location and run the logparser queries in there. en-USTelligent Evolution Platform Developer Build (Build: 5.6.50428.7875)http://blogs.msdn.com/b/mohamed_el_ashmawi/archive/2011/09/27/sharepoint-2010-capacity-management-log-parser-part-2.aspx#10223462Tue, 11 Oct 2011 22:02:59 GMT91d46819-8472-40ad-a661-2c78acb4018c:10223462Mohamed El Ashmawi<p>Yes, this tool can do much more than I used in the analysis mentioned above. Just keep in mind that it gets its input from the IIS logs, so it is limited by information in these logs. </p> <p>One possiblity is to analyze data based on agent type (user-agent). In such a case, the query will look like this: logparser -i:IISW3C &quot;select count(*) as ct,cs(user-agent) from *.log group by cs(user-agent) order by ct desc&quot;</p> <p>Another possibility is to analyze based on web pages and use &quot;cs-uri-stem&quot; and &quot;cs-uri-query&quot; fields for that..An example is </p> <p>logparser -i:CSV &quot;select count(*) as ct,TO_LOWERCASE(EXTRACT_EXTENSION(cs-uri-stem)) as ext from *.log &nbsp;group by ext order by ct desc&quot;</p> <div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=10223462" width="1" height="1">http://blogs.msdn.com/b/mohamed_el_ashmawi/archive/2011/09/27/sharepoint-2010-capacity-management-log-parser-part-2.aspx#10218475Fri, 30 Sep 2011 07:11:52 GMT91d46819-8472-40ad-a661-2c78acb4018c:10218475sharepoint_total<p>This is an amazing tool and a very nice blog article ! Other than user analysis, in what other ways can the log data be used? May be, the Request Type and Target info can be used to analyze things like most commonly accessed sites/webparts/features etc? </p> <div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=10218475" width="1" height="1">