logparser book is nice
i finally bought a copy of the Microsoft Log Parser Toolkit and have been enjoying quite a bit this week. it's a bit old (copyright 2004), but still has lots of great stuff in it. i;'m going to enjoy digging into my log files (of all types) for hidden gems.
while i've know about the tool for several years. and even used it a few times for IIS log review, i never knew/forgot that the tool could also be used to parse event logs, netmon output, even common general formats such as csv and xml. there's lots of great stuff here.