Here is a command using Log parser to retrieve a specific value in the cs-uri-query item.
LogParser -I:iisw3c "SELECT * INTO Filename.csv FROM \ServerName\ServerNameShareNameW3SVC111*.log where cs-uri-query Like '%http://bc0.cn/1.js%'" -o:CSV
Here is a command using Log parser to retrieve a specific value in the cs-uri-query item.
LogParser -I:iisw3c "SELECT * INTO Filename.csv FROM \ServerName\ServerNameShareNameW3SVC111*.log where cs-uri-query Like '%http://bc0.cn/1.js%'" -o:CSV
Pondering Thought 
Great example, just helped me a bunch.
LikeLike
Why would this query generate a Syntax Error: : no valid LIKE mask?
%LP% -i:iisw3c -o:W3C “SELECT * INTO FOOBAR.txt FROM ex070919.log where cs-uri-query Like ‘%winstonboys%'”
But the following query does not?
%LP% -i:iisw3c -o:W3C “SELECT * INTO FOOBAR.txt FROM ex070919.log where cs-uri-query Like ‘%26domains%'”
NOTE: %LP% is set to: SET LP=”C:Program FilesLog Parser 2.2logparser”
LikeLike