Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Log Parser ?

2 views
Skip to first unread message

tal

unread,
Apr 4, 2003, 6:29:31 PM4/4/03
to
Hello all,

i trying to use Log Parser to produce report based on
HTML page
that will retrive specific scurity events for the current
day but i have diffculty to uderstand the syntax .

pleas any idea
thanks in advanced.

Ritchie

unread,
Apr 5, 2003, 2:11:46 PM4/5/03
to
"tal" <t...@hotmail.com> wrote in message news:056101c2fb02$0b6e7590$3001...@phx.gbl...

> i trying to use Log Parser to produce report based on
> HTML page
> that will retrive specific scurity events for the current
> day but i have diffculty to uderstand the syntax .

How about something like: -

@logparser file:query.sql -i:EVT -o:CSV -stats:OFF

Where query.sql contains: -

SELECT *
FROM security
WHERE TO_STRING(SUB(TO_LOCALTIME(SYSTEM_TIMESTAMP()),
TimeGenerated), 'yyyy-MM-dd') = '11-30'
AND (EventID = 538 OR EventID = 540)

Search this group for an explanation of '11-30'

http://groups.google.com/groups?q=cmdprompt.admin+logparser

--
Ritchie


0 new messages