logparser.exe "SELECT cs-uri-stem, cs-uri-query, COUNT(*) AS TotalCount, MAX(time-taken) AS MaximumTime, AVG(time-taken) AS AverageTime FROM *.log GROUP BY cs-uri-stem, cs-uri-query ORDER BY AverageTime DESC" -i:w3c
take an cs-uri-stem value from the report above and replace it in the following command
logparser.exe "SELECT cs-uri-stem, cs-uri-query, sc-status, time-taken FROM *.log WHERE (cs-uri-stem='<cs_uri_stem_value>') ORDER BY time-taken DESC" -i:w3c