Microsoft Software Update Service Reporting Tool
SUS v1.1 is a great offering from Microsoft to automatically patch Windows clients and servers, but severely lacks the ability to report on patching activities. This utility will parse an IIS log file for SUS activity and report on what clients downloaded what patches. This utility will also provide verbose output to decipher the cryptic IIS SUS log file entries into something a little more meaningful to administrators.
SUSReport is free for download and use.
Usage: SUSReport.exe -i IISlogfile <-o outputfile> <-v> <-n> <-csv> <nohdr>
<-?>
Required flags:
-i = Input log file
Optional flags:
-o = Export output to file
-v = Verbose
-n = Resolve IP to hostname (may take a LONG time)
-csv = Format output as quote-comma delimited
-nohdr = Suppress the header
-? = Extended usage help
Some examples of command line flags usage:
Display clients summary who successfully downloaded patches from MyLogFile.log:
SUSReport.exe -i MyLogFile.log
Redirect the report output to a text file named MyReport.txt:
SUSReport.exe -i MyLogFile.log -o MyReport.txt
Instead of a summary, output all SUS activity with descriptions:
SUSReport.exe -i MyLogFile.log -v
Format the output as quote-comma delimited format into the MyReport.csv file:
SUSReport.exe -i MyLogFile.log -o MyReport.csv -csv
Format verbose output as quote-comma delimited into the MyReport.csv file:
SUSReport.exe -i MyLogFile.log -o MyReport.csv -v -csv
Parse a bunch of log files into one file named AllReport.csv while suppressing
the header rows. This option allows for easy import into other applications by
using quote-comma delimited entries:
for %i in (C:\WinNT\system32\LogFiles\*.log) do SUSReport.exe
-i %i -nohdr -csv >> c:\temp\AllReport.csv
To page this display:
SUSReport.exe -? | more
Sample output (summary output):
Date
Client
Source
Item
---------------------------------------------------------------------------------------------------
2003-10-08 12:06:04 10.1.2.3 au
q828750_ie_55sp2
2003-10-08 12:40:59 10.1.4.3 au
q828750_ie_55sp2
2003-10-08 12:59:10 10.1.4.151 au
q828750_ie_55sp2
2003-10-16 18:05:01 10.1.1.1
IU_Corp_SiteDownload xp_sp1_5446
2003-10-16 18:05:05 10.1.1.1
IU_Corp_SiteDownload q309521_xp_4973
2003-10-17 12:08:26 10.1.4.2
IU_Site
q828750_ie6_sp1
2003-10-17 12:08:27 10.1.5.21 IU_Site
q318089_w2k_xp_ie6_5226
2003-10-17 12:08:29 10.1.5.21 IU_Site
828035_w2k_sp5_winse_50221
2003-10-17 12:08:31 10.1.4.27 IU_Site
825119_w2k_sp5_winse_49554
Verbose Output (-v option):
Date Time Client pingID Source Activity Item Device Platform Language Status
Error Message
-----------------------------------------------------------------------------------------------------
2003-10-05 05:10:37 10.1.5.4 0d9d02299298304492299298304499027840f9fcef9f iu
Initialization - - 5.0.893 NT4/2000/XP/2003 Workstation 32-bit en-US Succeeded
00000000:NoError
2003-10-05 05:10:41 10.1.5.4 0d9d02299298304492299298304499027840f9fcef9f au
Detection - - 5.0.893 NT4/2000/XP/2003 Workstation 32-bit en-US Succeeded
00000000:NoError items=0
2003-10-05 07:30:58 10.1.4.3 1dbee429c4631b40b429c4631b40b1683b8f0b0b3cdc iu
Initialization - - 5.1.a28 NT4/2000/XP/2003 SBS installed Workstation 32-bit
en-US Succeeded 00000000:NoError
2003-10-05 07:30:59 10.1.4.3 1dbee429c4631b40b429c4631b40b1683b8f0b0b3cdc au
Detection - - 5.1.a28 NT4/2000/XP/2003 SBS installed Workstation 32-bit en-US
Succeeded 00000000:NoError items=0
2003-10-05 07:39:44 10.1.5.64 743ec7ed7adfab4f97ed7adfab4f9861ad2a38d6a312 iu
Initialization - - 5.0.893 NT4/2000/XP/2003 Workstation 32-bit en-US Succeeded
00000000:NoError
2003-10-05 07:39:47 10.1.5.64 743ec7ed7adfab4f97ed7adfab4f9861ad2a38d6a312 au
Detection - - 5.0.893 NT4/2000/XP/2003 Workstation 32-bit en-US Succeeded
00000000:NoError items=0
2003-10-07 20:00:00 10.1.3.176 3454aaedfd2b4e47baedfd2b4e47b02335e0e9d96b02 au
Download
ie55x.internetexplorer55x.ver_platform_win32_nt.5.0.x86.en...2195.4.0.com_microsoft.q828750_ie_55sp2.
- 5.0.893 NT4/2000/XP/2003 Workstation 32-bit en-US Succeeded 00000000:NoError
2003-10-07 20:00:30 10.1.3.177 25a2ec9d6cacfb498c9d6cacfb49885724817b59ebd0 au
Download
ie55x.internetexplorer55x.ver_platform_win32_nt.5.0.x86.en...2195.4.0.com_microsoft.q828750_ie_55sp2.
- 5.0.893 NT4/2000/XP/2003 Workstation 32-bit en-US Succeeded 00000000:NoError
2003-10-07 20:00:59 10.1.3.179 00110fc024e860479fc024e8604790dc46b56852c918 au
Download
ie60x.internetexplorer6x.ver_platform_win32_nt.5.0.x86.en...2195.4.0.com_microsoft.q828750_ie6_sp1.
- 5.0.893 NT4/2000/XP/2003 Workstation 32-bit en-US Succeeded 00000000:NoError
2003-10-10 19:25:47 10.1.3.37 21014dce303fa542adce303fa542aff86d15c0dfe8c7 au
Self-Update - - 5.0.893 NT4/2000/XP/2003 Workstation 32-bit en-US Failed
80190193:HTTP_STATUS_FORBIDDEN (403) ver=5.4.3630.2554
2003-10-10 19:25:47 10.1.3.37 21014dce303fa542adce303fa542aff86d15c0dfe8c7 au
Self-Update - - 5.0.893 NT4/2000/XP/2003 Workstation 32-bit en-US Failed
80190193:HTTP_STATUS_FORBIDDEN (403) ver=5.4.3630.2554
No warranty is offered with this utility. Like any other free tools, download
and use at your own risk. I am not responsible for any misuse or harm from
the use of this utility.
If you experience errors using this utility, feel free to contact
Joe Klemencic.
*********************************************************************************
Changes:
11/4/2003: Version 1.1
Fixed bug where clients do not report version
Added quote-comma output (-csv)
Added header suppression (-nohdr)
Added output to file option (-o filename)
Forcing -i <infile> for input filename
Added extended help usage
10/27/2003: Version 1.0 released
*********************************************************************************