It looks like only the "Filename" is a keyword. I misspoke about the Timestamp.
Here is an example of what I mean...
---- example.tab -------------------
myTimestamp myFilename Timestamp Filename
11/8/2009 19:42 \easy\to\see.exe 1/1/2013 0:00 \still\here.chm
11/8/2009 19:42 \me\too\see.exe 1/1/2013 0:00 \traveling\space.chm
----- end file -------------------------
$> logparser "SELECT Filename FROM example.tab" -i:TSV -iSeparator:tab -fixedSep:ON
I get the fullpath for example.tab where I mean to get the data in the column called "Filename". Anybody know what I am doing wrong?