<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://blogs.msdn.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Jimmie's Sharings : Data Mining</title><link>http://blogs.msdn.com/jimmiet/archive/tags/Data+Mining/default.aspx</link><description>Tags: Data Mining</description><dc:language>en-US</dc:language><generator>CommunityServer 2.1 SP1 (Build: 61025.2)</generator><item><title>ULS Log File Data Mining</title><link>http://blogs.msdn.com/jimmiet/archive/2008/03/15/uls-log-file-data-mining.aspx</link><pubDate>Sat, 15 Mar 2008 20:47:00 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:8234811</guid><dc:creator>jimmiet</dc:creator><slash:comments>2</slash:comments><comments>http://blogs.msdn.com/jimmiet/comments/8234811.aspx</comments><wfw:commentRss>http://blogs.msdn.com/jimmiet/commentrss.aspx?PostID=8234811</wfw:commentRss><description>&lt;META content=Word.Document name=ProgId&gt;
&lt;META content="Microsoft Word 12" name=Generator&gt;
&lt;META content="Microsoft Word 12" name=Originator&gt;&lt;LINK href="ULS%20Log%20Parsing_files/filelist.xml" rel=File-List mce_href="ULS%20Log%20Parsing_files/filelist.xml"&gt;&lt;LINK href="ULS%20Log%20Parsing_files/themedata.thmx" rel=themeData mce_href="ULS%20Log%20Parsing_files/themedata.thmx"&gt;&lt;LINK href="ULS%20Log%20Parsing_files/colorschememapping.xml" rel=colorSchemeMapping mce_href="ULS%20Log%20Parsing_files/colorschememapping.xml"&gt;
&lt;STYLE&gt;@font-face {
	font-family: Wingdings;
}
@font-face {
	font-family: Cambria Math;
}
@font-face {
	font-family: Cambria;
}
@font-face {
	font-family: Calibri;
}
@font-face {
	font-family: Tahoma;
}
@page Section1 {size: 8.5in 11.0in; margin: 1.0in 1.0in 1.0in 1.0in; mso-header-margin: .5in; mso-footer-margin: .5in; mso-paper-source: 0; }
P.MsoNormal {
	FONT-SIZE: 11pt; MARGIN: 6pt 0in; LINE-HEIGHT: 115%; FONT-FAMILY: "Calibri","sans-serif"; mso-fareast-font-family: Calibri; mso-bidi-font-family: "Times New Roman"; mso-style-unhide: no; mso-style-qformat: yes; mso-style-parent: ""; mso-pagination: widow-orphan
}
LI.MsoNormal {
	FONT-SIZE: 11pt; MARGIN: 6pt 0in; LINE-HEIGHT: 115%; FONT-FAMILY: "Calibri","sans-serif"; mso-fareast-font-family: Calibri; mso-bidi-font-family: "Times New Roman"; mso-style-unhide: no; mso-style-qformat: yes; mso-style-parent: ""; mso-pagination: widow-orphan
}
DIV.MsoNormal {
	FONT-SIZE: 11pt; MARGIN: 6pt 0in; LINE-HEIGHT: 115%; FONT-FAMILY: "Calibri","sans-serif"; mso-fareast-font-family: Calibri; mso-bidi-font-family: "Times New Roman"; mso-style-unhide: no; mso-style-qformat: yes; mso-style-parent: ""; mso-pagination: widow-orphan
}
H1 {
	FONT-SIZE: 14pt; MARGIN: 24pt 0in 0pt; COLOR: #365f91; LINE-HEIGHT: 115%; FONT-FAMILY: "Cambria","serif"; mso-fareast-font-family: "Times New Roman"; mso-style-priority: 9; mso-style-unhide: no; mso-style-qformat: yes; mso-pagination: widow-orphan lines-together; mso-style-next: Normal; mso-outline-level: 1; mso-font-kerning: 0pt; mso-style-link: "Heading 1 Char"
}
A:link {
	COLOR: blue; TEXT-DECORATION: underline; text-underline: single; mso-style-priority: 99
}
SPAN.MsoHyperlink {
	COLOR: blue; TEXT-DECORATION: underline; text-underline: single; mso-style-priority: 99
}
A:visited {
	COLOR: purple; TEXT-DECORATION: underline; mso-themecolor: followedhyperlink; text-underline: single; mso-style-priority: 99; mso-style-noshow: yes
}
SPAN.MsoHyperlinkFollowed {
	COLOR: purple; TEXT-DECORATION: underline; mso-themecolor: followedhyperlink; text-underline: single; mso-style-priority: 99; mso-style-noshow: yes
}
P.MsoDocumentMap {
	FONT-SIZE: 8pt; MARGIN: 6pt 0in 0pt; FONT-FAMILY: "Tahoma","sans-serif"; mso-fareast-font-family: Calibri; mso-style-priority: 99; mso-pagination: widow-orphan; mso-style-noshow: yes; mso-style-link: "Document Map Char"
}
LI.MsoDocumentMap {
	FONT-SIZE: 8pt; MARGIN: 6pt 0in 0pt; FONT-FAMILY: "Tahoma","sans-serif"; mso-fareast-font-family: Calibri; mso-style-priority: 99; mso-pagination: widow-orphan; mso-style-noshow: yes; mso-style-link: "Document Map Char"
}
DIV.MsoDocumentMap {
	FONT-SIZE: 8pt; MARGIN: 6pt 0in 0pt; FONT-FAMILY: "Tahoma","sans-serif"; mso-fareast-font-family: Calibri; mso-style-priority: 99; mso-pagination: widow-orphan; mso-style-noshow: yes; mso-style-link: "Document Map Char"
}
P.MsoListParagraph {
	FONT-SIZE: 11pt; MARGIN: 6pt 0in 6pt 0.5in; LINE-HEIGHT: 115%; FONT-FAMILY: "Calibri","sans-serif"; mso-fareast-font-family: Calibri; mso-bidi-font-family: "Times New Roman"; mso-style-priority: 34; mso-style-unhide: no; mso-style-qformat: yes; mso-pagination: widow-orphan; mso-add-space: auto
}
LI.MsoListParagraph {
	FONT-SIZE: 11pt; MARGIN: 6pt 0in 6pt 0.5in; LINE-HEIGHT: 115%; FONT-FAMILY: "Calibri","sans-serif"; mso-fareast-font-family: Calibri; mso-bidi-font-family: "Times New Roman"; mso-style-priority: 34; mso-style-unhide: no; mso-style-qformat: yes; mso-pagination: widow-orphan; mso-add-space: auto
}
DIV.MsoListParagraph {
	FONT-SIZE: 11pt; MARGIN: 6pt 0in 6pt 0.5in; LINE-HEIGHT: 115%; FONT-FAMILY: "Calibri","sans-serif"; mso-fareast-font-family: Calibri; mso-bidi-font-family: "Times New Roman"; mso-style-priority: 34; mso-style-unhide: no; mso-style-qformat: yes; mso-pagination: widow-orphan; mso-add-space: auto
}
P.MsoListParagraphCxSpFirst {
	FONT-SIZE: 11pt; MARGIN: 6pt 0in 0pt 0.5in; LINE-HEIGHT: 115%; FONT-FAMILY: "Calibri","sans-serif"; mso-fareast-font-family: Calibri; mso-bidi-font-family: "Times New Roman"; mso-style-priority: 34; mso-style-unhide: no; mso-style-qformat: yes; mso-pagination: widow-orphan; mso-add-space: auto; mso-style-type: export-only
}
LI.MsoListParagraphCxSpFirst {
	FONT-SIZE: 11pt; MARGIN: 6pt 0in 0pt 0.5in; LINE-HEIGHT: 115%; FONT-FAMILY: "Calibri","sans-serif"; mso-fareast-font-family: Calibri; mso-bidi-font-family: "Times New Roman"; mso-style-priority: 34; mso-style-unhide: no; mso-style-qformat: yes; mso-pagination: widow-orphan; mso-add-space: auto; mso-style-type: export-only
}
DIV.MsoListParagraphCxSpFirst {
	FONT-SIZE: 11pt; MARGIN: 6pt 0in 0pt 0.5in; LINE-HEIGHT: 115%; FONT-FAMILY: "Calibri","sans-serif"; mso-fareast-font-family: Calibri; mso-bidi-font-family: "Times New Roman"; mso-style-priority: 34; mso-style-unhide: no; mso-style-qformat: yes; mso-pagination: widow-orphan; mso-add-space: auto; mso-style-type: export-only
}
P.MsoListParagraphCxSpMiddle {
	FONT-SIZE: 11pt; MARGIN: 0in 0in 0pt 0.5in; LINE-HEIGHT: 115%; FONT-FAMILY: "Calibri","sans-serif"; mso-fareast-font-family: Calibri; mso-bidi-font-family: "Times New Roman"; mso-style-priority: 34; mso-style-unhide: no; mso-style-qformat: yes; mso-pagination: widow-orphan; mso-add-space: auto; mso-style-type: export-only
}
LI.MsoListParagraphCxSpMiddle {
	FONT-SIZE: 11pt; MARGIN: 0in 0in 0pt 0.5in; LINE-HEIGHT: 115%; FONT-FAMILY: "Calibri","sans-serif"; mso-fareast-font-family: Calibri; mso-bidi-font-family: "Times New Roman"; mso-style-priority: 34; mso-style-unhide: no; mso-style-qformat: yes; mso-pagination: widow-orphan; mso-add-space: auto; mso-style-type: export-only
}
DIV.MsoListParagraphCxSpMiddle {
	FONT-SIZE: 11pt; MARGIN: 0in 0in 0pt 0.5in; LINE-HEIGHT: 115%; FONT-FAMILY: "Calibri","sans-serif"; mso-fareast-font-family: Calibri; mso-bidi-font-family: "Times New Roman"; mso-style-priority: 34; mso-style-unhide: no; mso-style-qformat: yes; mso-pagination: widow-orphan; mso-add-space: auto; mso-style-type: export-only
}
P.MsoListParagraphCxSpLast {
	FONT-SIZE: 11pt; MARGIN: 0in 0in 6pt 0.5in; LINE-HEIGHT: 115%; FONT-FAMILY: "Calibri","sans-serif"; mso-fareast-font-family: Calibri; mso-bidi-font-family: "Times New Roman"; mso-style-priority: 34; mso-style-unhide: no; mso-style-qformat: yes; mso-pagination: widow-orphan; mso-add-space: auto; mso-style-type: export-only
}
LI.MsoListParagraphCxSpLast {
	FONT-SIZE: 11pt; MARGIN: 0in 0in 6pt 0.5in; LINE-HEIGHT: 115%; FONT-FAMILY: "Calibri","sans-serif"; mso-fareast-font-family: Calibri; mso-bidi-font-family: "Times New Roman"; mso-style-priority: 34; mso-style-unhide: no; mso-style-qformat: yes; mso-pagination: widow-orphan; mso-add-space: auto; mso-style-type: export-only
}
DIV.MsoListParagraphCxSpLast {
	FONT-SIZE: 11pt; MARGIN: 0in 0in 6pt 0.5in; LINE-HEIGHT: 115%; FONT-FAMILY: "Calibri","sans-serif"; mso-fareast-font-family: Calibri; mso-bidi-font-family: "Times New Roman"; mso-style-priority: 34; mso-style-unhide: no; mso-style-qformat: yes; mso-pagination: widow-orphan; mso-add-space: auto; mso-style-type: export-only
}
SPAN.Heading1Char {
	FONT-WEIGHT: bold; COLOR: #365f91; FONT-FAMILY: "Cambria","serif"; mso-bidi-font-size: 14.0pt; mso-fareast-font-family: "Times New Roman"; mso-ascii-font-family: Cambria; mso-hansi-font-family: Cambria; mso-bidi-font-family: "Times New Roman"; mso-style-priority: 9; mso-style-unhide: no; mso-style-link: "Heading 1"; mso-style-name: "Heading 1 Char"; mso-style-locked: yes; mso-ansi-font-size: 14.0pt
}
SPAN.DocumentMapChar {
	FONT-FAMILY: "Tahoma","sans-serif"; mso-bidi-font-size: 8.0pt; mso-ascii-font-family: Tahoma; mso-hansi-font-family: Tahoma; mso-bidi-font-family: Tahoma; mso-style-priority: 99; mso-style-unhide: no; mso-style-noshow: yes; mso-style-link: "Document Map"; mso-style-name: "Document Map Char"; mso-style-locked: yes; mso-ansi-font-size: 8.0pt
}
P.Sample {
	FONT-SIZE: 9pt; BACKGROUND: #d9d9d9; MARGIN: 0in 0in 0pt 0.3in; LINE-HEIGHT: 115%; FONT-FAMILY: "Courier New"; mso-bidi-font-size: 11.0pt; mso-fareast-font-family: Calibri; mso-no-proof: yes; mso-bidi-font-family: "Times New Roman"; mso-style-unhide: no; mso-style-qformat: yes; mso-pagination: widow-orphan; mso-style-name: Sample
}
LI.Sample {
	FONT-SIZE: 9pt; BACKGROUND: #d9d9d9; MARGIN: 0in 0in 0pt 0.3in; LINE-HEIGHT: 115%; FONT-FAMILY: "Courier New"; mso-bidi-font-size: 11.0pt; mso-fareast-font-family: Calibri; mso-no-proof: yes; mso-bidi-font-family: "Times New Roman"; mso-style-unhide: no; mso-style-qformat: yes; mso-pagination: widow-orphan; mso-style-name: Sample
}
DIV.Sample {
	FONT-SIZE: 9pt; BACKGROUND: #d9d9d9; MARGIN: 0in 0in 0pt 0.3in; LINE-HEIGHT: 115%; FONT-FAMILY: "Courier New"; mso-bidi-font-size: 11.0pt; mso-fareast-font-family: Calibri; mso-no-proof: yes; mso-bidi-font-family: "Times New Roman"; mso-style-unhide: no; mso-style-qformat: yes; mso-pagination: widow-orphan; mso-style-name: Sample
}
SPAN.SpellE {
	mso-style-name: ""; mso-spl-e: yes
}
SPAN.GramE {
	mso-style-name: ""; mso-gram-e: yes
}
.MsoChpDefault {
	mso-fareast-font-family: Calibri; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri; mso-style-type: export-only; mso-default-props: yes
}
DIV.Section1 {
	page: Section1
}
OL {
	MARGIN-BOTTOM: 0in
}
UL {
	MARGIN-BOTTOM: 0in
}
&lt;/STYLE&gt;

&lt;DIV class=Section1&gt;
&lt;H1&gt;ULS Log File Data Mining&lt;/H1&gt;
&lt;P class=MsoNormal&gt;Finding meaningful information in SharePoint ULS logs is frustrating. It can be like finding a needle in a hay stack. &lt;/P&gt;
&lt;P class=MsoNormal&gt;Assume you want to find all the Exceptions thrown in the last 72 hours. You go to the LOGS folder (but due to some categories set to verbose logging, coupled with a recurring error) to discover there are 6 GB of log files. Many of the individual log files are so large you cannot open them with Excel or Notepad. What do you do now?&lt;/P&gt;
&lt;P class=MsoNormal&gt;Fortunately, there is a tool available that makes it possible to data mine ULS logs. This tool was originally developed to data mine IIS log files. Over the years it has been enhanced and extended to data mine other log file formats; such as, system event logs, comma separate text files, Network Monitor logs, the registry, even the file system! It is indeed the Swiss Army knife of log file data mining. It is named &lt;B style="mso-bidi-font-weight: normal"&gt;Log Parser&lt;/B&gt;, now in version 2.2. LogParser can slice-and-dice log files in a multitude of ways. It can output the results to text files, SQL Server tables, or charts. It is indeed, a great way to analyze ULS logs! (view &lt;A class="" title="ULS Log File Data Mining" href="http://blogs.msdn.com/jimmiet/pages/uls-log-file-data-mining.aspx" mce_href="http://blogs.msdn.com/jimmiet/pages/uls-log-file-data-mining.aspx"&gt;entire article&lt;/A&gt; ...)&lt;/P&gt;&lt;/DIV&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=8234811" width="1" height="1"&gt;</description><category domain="http://blogs.msdn.com/jimmiet/archive/tags/Data+Mining/default.aspx">Data Mining</category><category domain="http://blogs.msdn.com/jimmiet/archive/tags/LogParser/default.aspx">LogParser</category><category domain="http://blogs.msdn.com/jimmiet/archive/tags/ULS+Log/default.aspx">ULS Log</category><category domain="http://blogs.msdn.com/jimmiet/archive/tags/SharePoint/default.aspx">SharePoint</category></item></channel></rss>