Glad to hear it worked. Looking forward to seeing the code in the repository.

[QUOTE User="LogParser User : seriousRookie"]Quote: Your first post specifically said %1 so I thought you were passing date in. So just change the set argdate line to set argdate=%date% and then change all the startpos numbers (the first argument) in ...[/QUOTE] that is exactly what I did...i was going...

Your first post specifically said %1 so I thought you were passing date in. So just change the set argdate line to set argdate=%date% and then change all the startpos numbers (the first argument) in the argdate parsing to match the new date format. set argdate=%date% set inputfilename=ex%argdate:~12...

Thanks for the help The only thing is that im not passing the date over as a param...i wanted to use the system date somehow and go from there but its wed 04/19/2006. Unless there is a way to have task schedular add the system date (in right format) as param ? (xp2k3 server) I did seperate the file into...

You'll have to use batch scripting to create the two date formats you need for your INTO and FROM filenames. Also note that %date% is a special environment variable in cmd. It would be much safer to have a different variable name. I'd also recommend pulling your query out of the command line and saving...

I am trying to create a batch file that will output to tpl template i want to run this in task scheduler daily but i need a var for logfile date in yy/mm/dd format in stead of hardcoding log file ex060310.log. I also want to save the template file with the date appended on to it so I can display the...

Thanks for assistance. All I am trying to do is to check security logs for intrusion attempts. This means the event log that would not normally have the relevant event ID. I want to produce a report that actually states that no untoward events have or have not taken place - user confidence, really! The...

Here is a clip from the manual, in the section about the from clause : Regardless of the input format used, the <from_entity> specified in the FROM clause must comply with the following general syntax: The <from_entity> must be a single element or a list of elements, separated by the ' ,...

I was taking input from various server event logs so this would leave me with two different inputs. Is this possible? I haven't seen anything in book or forums re this. Would the best way to go be, to produce a new file and then run a seperate query against the two files, or is there an easier/alternative...

Well, you could produce a dummy file with all of the possible event numbers in, then report on the dummy file and your main file together. As far as putting the date in the filename, thats easy, use the multiplexed output ... you put a * everywhere in the INTO <filename> that you wish variable...