Supported input formats & data sources

Give SQL access to the data you already have.

Any supported log or text-based source can become a queryable table. Work with web and Windows logs, everyday files, system metadata, databases, scripts and readers—without sending data outside your environment.

27 sources & readers 6 source families 1 visual SQL workspace

Complete provider catalog

Windows events, everyday text and database results.

Available fields and SQL capabilities vary by provider.

W3C Extended logs: IIS, FTP, Apache, Exchange, SharePoint, firewalls, ISA Server, Windows Media, SMTP and more.
IIS W3C and IIS log file formats.
IIS centralized binary log files.
HTTP error logs and URLScan logs.
Windows Event Log: local or remote, all channels and .evtx backups.
Enterprise Tracing for Windows (ETW).

File system enumeration: files, folders and metadata.
Media file metadata for video, image and audio.
Registry keys and values, local and remote.
Active Directory objects via SQL.
NetMon network captures.

CSV, TSV and space-separated files, including Excel and PerfMon output.
TEXTLINE and TEXTWORD generic text formats.
Generic XML documents and configuration files.
JSON-formatted logs and saved API output.
Log4j/log4net XML and multi-line RegEx formats.
GROK and RegEx parsing, including compressed or encrypted .gz logs.

SQL Server with T-SQL queries.
OLE DB SQL for MySQL, Oracle, Access, PostgreSQL and other providers.
Google BigQuery for external large-scale data when needed.
SQLite and SQL Server Compact.

C# .NET data sources.
VB.NET data sources.
PowerShell script data sources.
Log Parser COM input plugins.

HTML table reader.
Excel file reader.
Ultimate dates and ultimate numbers utility tables.

Example questions

One familiar way to ask across many sources.

Windows Event Logs

Count recurring events

SELECT EventID, COUNT(*) AS total FROM System GROUP BY EventID;

Text and CSV files

Summarize exported records

SELECT status, COUNT(*) AS total FROM records GROUP BY status;

Connected databases

Find recent failed jobs

SELECT job_name, status FROM job_history WHERE status = 'Failed';

More query examples →

See your source as rows

Open it. Query it. Explain it.

No mandatory cloud upload or long indexing project.

Download for Windows →