<?xml version="1.0" encoding="utf-8"?>
<ArrayOfLPBatchQuery xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
  <LPBatchQuery>
    <QueryName>IIS: Top 20 URIs</QueryName>
    <QueryDescription>Top 20 URIs requested</QueryDescription>
    <QueryData>SELECT TOP 20 	cs-uri-stem, 
		COUNT(*) AS Total, 
		MAX(time-taken) AS MaxTime, 
		AVG(time-taken) AS AvgTime 
	/* bytes--&gt;	AVG(sc-bytes) AS AvgBytes */
FROM '[LOGFILEPATH]' 
GROUP BY cs-uri-stem
ORDER BY Total DESC
</QueryData>
    <QueryID>2818b23a-5cbe-4e8d-b629-0263313bc4eb</QueryID>
    <LogType>IISW3CLOG</LogType>
    <QueryCategory>ALL</QueryCategory>
    <IsFavorite>false</IsFavorite>
    <BatchItemGuid>da654f90-1444-45db-9284-d1b2511d9d0c</BatchItemGuid>
  </LPBatchQuery>
  <LPBatchQuery>
    <QueryName>IIS: Request per Hour</QueryName>
    <QueryDescription>RequestsPerHour description</QueryDescription>
    <QueryData>SELECT	QUANTIZE(TO_TIMESTAMP(date, time), 3600) AS Hour, 
	COUNT(*) AS Total,  
	SUM(sc-bytes) AS TotBytesSent 
FROM '[LOGFILEPATH]'
GROUP BY Hour 
ORDER BY Hour
</QueryData>
    <QueryID>451fac87-f83c-4d7d-b8ac-c443852f9ad5</QueryID>
    <LogType>IISW3CLOG</LogType>
    <QueryCategory>ALL</QueryCategory>
    <IsFavorite>false</IsFavorite>
    <BatchItemGuid>b854352c-717c-486b-9bd0-1115707f78e5</BatchItemGuid>
  </LPBatchQuery>
  <LPBatchQuery>
    <QueryName>IIS: HTTP Status Codes by Count</QueryName>
    <QueryDescription>Returns all status codes and how many times each one occurred.</QueryDescription>
    <QueryData>/*  Count and sort all HTTP status codes */

SELECT TOP 25  
    STRCAT(TO_STRING(sc-status),  
    STRCAT('.', TO_STRING(sc-substatus))) As Status,  
    COUNT(*) AS Hits  
    FROM '[LOGFILEPATH]'  
GROUP BY Status  
ORDER BY Hits DESC </QueryData>
    <QueryID>e80a8693-c0be-49fd-bcab-7e8f6512cfd7</QueryID>
    <LogType>IISW3CLOG</LogType>
    <QueryCategory>ALL</QueryCategory>
    <IsFavorite>true</IsFavorite>
    <BatchItemGuid>1d881e90-3aff-4b7c-92a4-afbc44e972fe</BatchItemGuid>
  </LPBatchQuery>
  <LPBatchQuery>
    <QueryName>Avg Response for all users</QueryName>
    <QueryDescription>Average response time for all users</QueryDescription>
    <QueryData>/* Avg Response for all users */

Select cs-username AS UserName, 
AVG(time-taken) AS AvgTime, 
Count(*) AS Hits 
FROM '[LOGFILEPATH]' 
GROUP BY cs-username 
Order BY AvgTime DESC</QueryData>
    <QueryID>16cddbfd-104c-47a8-a66c-94d1d3efacf4</QueryID>
    <LogType>IISW3CLOG</LogType>
    <QueryCategory>ALL</QueryCategory>
    <IsFavorite>false</IsFavorite>
    <BatchItemGuid>1defa47d-a7bd-47a8-b420-a02c22b42df0</BatchItemGuid>
  </LPBatchQuery>
  <LPBatchQuery>
    <QueryName>Authentication Failures</QueryName>
    <QueryDescription>Count IIS authentication errors per user</QueryDescription>
    <QueryData>SELECT 	cs-username, 
	sc-status, 
	COUNT(*) AS Total 
FROM '[LOGFILEPATH]' 
WHERE cs-username IS NOT NULL AND sc-status BETWEEN 401 AND 403
GROUP BY cs-username,sc-status, cs-uri-stem 
ORDER BY Total DESC
</QueryData>
    <QueryID>59b74fbf-e103-46b4-922d-0a0cc0e14911</QueryID>
    <LogType>IISW3CLOG</LogType>
    <QueryCategory>ALL</QueryCategory>
    <IsFavorite>false</IsFavorite>
    <BatchItemGuid>23c02cad-8660-4d63-8993-a4a2051597dc</BatchItemGuid>
  </LPBatchQuery>
</ArrayOfLPBatchQuery>