« Previous Next »

Thread: Parsing capable?

Last post 04-24-2009 7:42 PM by ytsejam1. 2 replies.

Average Rating Rate It (5)

RSS

Page 1 of 1 (3 items)

Sort Posts:

  • 04-22-2009, 9:35 AM

    • ytsejam1
    • Not Ranked
    • Joined on 04-22-2009, 9:27 AM
    • Posts 3

    Parsing capable?

    Hello

    I'm new to log parser 2.2

    I need to control some log files . Here is a littel piece from the log:

    2009-04-13 12:26:13,121 -- SigFileSender -- INFO  -- Adding clip [E3-0ktY9yTU] to sending queue

    2009-04-13 12:26:13,125 -- SigFileSender -- INFO  -- Starting to index clip [MgkkdiPPNo8]

    2009-04-13 12:26:19,228 -- SigFileSender -- INFO  -- Signatures of clipid 6pljIBkl56I for query The Dark Knight were sent successfully!

    2009-04-14 15:38:09,751 -- SigFileSender -- ERROR -- Error getting response stream (ReadDone1): ReceiveFailure

    2009-04-19 07:53:15,062 -- SigFileSender -- INFO  -- Adding clip [fK2YP_a5HG4] to sending
    queue

    2009-04-19 07:53:15,063 -- SigFileSender -- INFO  -- Starting to index clip [fYQRQbbWFMs]

     

    Is Log Parser 2.2 capable to get spesific data  through querys, with this log file format?

    I mean, if for instance i want to get the latest Error message from this log format.
    Log Praser 2.2 can do it?

    Is it does, please help.

    Thanks 

  • 04-23-2009, 7:31 PM In reply to

    • ksingla
    • Top 10 Contributor
    • Joined on 06-14-2006, 3:02 AM
    • Redmond, WA
    • Posts 845

    Re: Parsing capable?

    After keeping first line as "Date -- Sender -- Type -- Text" to define the column names, following query should do.

    logparser.exe "select top 1 * from test.txt where Type like '%error%' order by Date desc" -i:tsv -iSeparator:- -nSep:2

    Thanks.
    Kanwal

    Follow me on twitter at http://twitter.com/kjsingla
  • 04-24-2009, 7:42 PM In reply to

    • ytsejam1
    • Not Ranked
    • Joined on 04-22-2009, 9:27 AM
    • Posts 3

    Re: Parsing capable?

    Hi,

    I had to configure The COMTSVInputContext object for the separators but that was easy. 

    Thank you very much!

     

Page 1 of 1 (3 items)