« Previous Next »

• 01-22-2009, 4:34 PM

  anirudhmodi Joined on 08-21-2008, 10:54 PM Posts 3

  Bug with REG input.. Reply Contact I am trying to run a simple REG query using the LogParser.exe (latest version v2.2): LogParser.exe "SELECT DISTINCT Path FROM \\MyBox\HKLM\SOFTWARE\MyCompany\MyProduct\1.2" -o:DATAGRID  but I am missing several entries (I only see 12 out of the 20 key-nodes under the specified registry key). Same problem when using the LogParser.dll. Is there a known bug with the built-in registry plug-in? Are there any security settings that may be causing LogParser to miss certain entries? I can see all the entries just fine when I open using regedit or use the Win32 APIs (RegOpenKeyEx, etc.). I can see all the keys when I run "reg Query \\MyBox\HKLM\SOFTWARE\MyCompany\MyProduct\1.2 /s" from command line. FYI: I am running Windows 2003 Server x64 Enterprise Edition.

  Tags: REG input formatlogparserregbug

• 01-24-2009, 2:18 PM

  In reply to

  ksingla Joined on 06-14-2006, 3:02 AM Redmond, WA Posts 863	Re: Bug with REG input.. Reply Contact Are you sure only keys are getting printed in reg query output and not any values as path in logparser only contains key name and printing distinct paths will only print one entry for all values under one keynode. Can you paste the reg query output? Thanks, Kanwal Follow me on twitter at http://twitter.com/kjsingla

• 01-24-2009, 4:33 PM

  In reply to

  anirudhmodi Joined on 08-21-2008, 10:54 PM Posts 3

  Re: Bug with REG input.. Reply Contact Actually, after some digging in, I found the source of the bug (it's still a bug in my opinion). It seems that LogParser will not display any keys that do not have values inside them (even if they have other keys inside them). Here's an example of my registry (exported via regedit): Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\MyKey] [HKEY_LOCAL_MACHINE\SYSTEM\MyKey\Key1] "Value1"="" [HKEY_LOCAL_MACHINE\SYSTEM\MyKey\Key2] [HKEY_LOCAL_MACHINE\SYSTEM\MyKey\Key3] "Value3"=""  And here is the LogParser query....note that Key2 is missing from output: C:\Program Files\Log Parser 2.2>LogParser.exe "select Path, KeyName, ValueName from HKLM\SYSTEM\MyKey" Path                   KeyName ValueName ---------------------- ------- --------- HKLM\SYSTEM\MyKey\Key1 Key1    Value1 HKLM\SYSTEM\MyKey\Key3 Key3    Value3 Statistics: ----------- Elements processed: 2 Elements output:    2 Execution time:     0.02 seconds