Listing 1: Query to Determine Top Recipients
logparser "SELECT TOP 10 Recipient-Address, COUNT(*) as [#Messages] 
FROM %logs%
WHERE [Event-ID] = 1028 
GROUP BY Recipient-Address 
ORDER BY [#Messages] DESC"