This script scans IIS logs and sends email with attempts/failures/successes given a date/logfile.

Outlook Web Access (OWA) accesses are stored in the IIS Log Files.  Using LogParser 2.1 and blat, this (hacked) script takes 1 parameter - the date in mmddyy that you wish to analyze and opens the corresponding logfile in the IIS log directory.  It will auto sort/group the results by result code (200 success, errors, etc.), and return the IP address, username and client string of the attempt(s).  These results are emailed to you in HTML format.

http://justinho.com/files/uploads/OWALogParser.rar

Open up OWA.cmd in notepad – should be pretty explanatory.  Will open SMTP port 25 and email to address specified.

More:

• http://rideagainstthemachine.blogspot.com/2008/02/using-microsoft-log-parser-to-search.html?showComment=1208528280000
• http://www.robvanderwoude.com/datetiment.html
• http://www.huweb.hu/maques/realdate.htm
• http://msexchangeteam.com/archive/2006/03/03/421149.aspx
• http://www.larkware.com/Articles/LogParser2.0Help.html