i trying to use Log Parser to produce report based on
HTML page
that will retrive specific scurity events for the current
day but i have diffculty to uderstand the syntax .
pleas any idea
thanks in advanced.
How about something like: -
@logparser file:query.sql -i:EVT -o:CSV -stats:OFF
Where query.sql contains: -
SELECT *
FROM security
WHERE TO_STRING(SUB(TO_LOCALTIME(SYSTEM_TIMESTAMP()),
TimeGenerated), 'yyyy-MM-dd') = '11-30'
AND (EventID = 538 OR EventID = 540)
Search this group for an explanation of '11-30'
http://groups.google.com/groups?q=cmdprompt.admin+logparser
--
Ritchie