Hi ,
I have the following permission dump:
\\server\mig_shared\ (P) -------------------------------------------
[S-1-5-21-1992932873-789336058-839522115-1013]: RWXD-/RWXD-/RWXD-
Administrators: RWXDPOF-/RWXDPOF-/RWXDPOF- (owner)
Users: RX-/RX-/RX-
\\server\mig_shared\#ARCHIVE\ ---------------------------------------
\\server\mig_shared\#ARCHIVE\ERAS2000\ ------------------------------
\\server\mig_shared\#ARCHIVE\ERAS2000\Bde32\ ------------------------
\\server\mig_shared\#ARCHIVE\ERAS2000\Bde32\DISK1\ ------------------
\\server\mig_shared\#ARCHIVE\ERAS2000\Bde32\DISK2\ ------------------
1.) For the lines containing only the permissions, i'd like to prefix the path for which they have been reportedly applied to - as follows:
\\server\mig_shared\ (P) -------------------------------------------
\\server\mig_shared [S-1-5-21-1992932873-789336058-839522115-1013]: RWXD-/RWXD-/RWXD-
\\server\mig_shared Administrators: RWXDPOF-/RWXDPOF-/RWXDPOF- (owner)
\\server\mig_shared Users: RX-/RX-/RX-
2.) I'd like to strip the paths or denote the permission paths with a character in the output so i can perform a second query just returning these results.
Any ideas how i can achieve this with logparser?
Thanks
Marcus