Tool to parse Serv-U log files

I load each flat text daily log file and use MSSQL* to parse & search; so for instance if seeking a particular IP or Vendor user ID, I do an inner query to find the ID, (nnnnnnn) value and then get any rows matching that ID, HOWEVER the ID repeats so another limiter is needed to ensure that only relevant rows are returned; an easy one is to parse the time date from the same log value string and say w/in n minuites

*MSSQL, using a read folder to first parse the file name which contains a "day" date, then as noted above search for some part of the log string.

I assume you are not using the Serv-U Gateway as the IP address does not get passed back to the Serv-U Server Logs or are you pulling Logs from that as well?

Um, not sure what is being asked... from the GW
Where 207.87 is IP of connected system, and 125.238 is the GW
The logs look similar from either, GW or not
11461 [02] Thu 23Feb23 23:13:02 - (003446) Connected to 207.87.241.39 (local address 125.238.52.122, port 22)
11462 [03] Thu 23Feb23 23:13:02 - (003446) IP-Name: iut.azenahealth.com (207.87.241.39)
11463 [02] Thu 23Feb23 23:13:02 - (003446) User "Azena" logged in

I thought when GW in use outside Firewall, it no longer records the Client IP address in the MFT Server's logs?

As noted above, the GW log is like the regular DMZ log with the Client IP

Thanks for confirming

Thanks for confirming