daniel Many thanks for this help - it's much appreciated. I've got a little further with your help. It looks like it may be down to some format thing in the actual xml logs themselves. On your suggestion i tried your example which worked ok, tried using the same commands on a snippet of one of the logs...

After replying, I wrote up a quick test.xml file with the following format: <root> <row><ts>2006-04-13T13:45:33</ts></row> <row><ts>2006-04-13T13:45:33</ts></row> <row><ts>2006-04-13T13:45:33</ts></row> <row><ts>2006...

I'll ask just because you used lowercase throughout on your first message.. Please forgive if it seems obvious to you. Did you realize that the M's used to designate the month must be capitalized? If you use lowercase m's for the month, it will think you are referring to minutes and it wouldn't be able...

Daniel Thanks for the reply, and even on a sunday !. Yes l've tried the iTsformat bit (both specifying with and without) but each time the combined datetime field keeps on coming back with a - rather than any values. i've looked at the timestamp function but i think that is more for a string that looks...

Did you try using the -iTsFormat parameter? -iTsFormat:"yyyy-MM-ddThh:mm:ss" If this one field has a date different from the format of other date fields, then you'll need to parse the field manually in your query with TO_TIMESTAMP(timeField, 'yyyy-MM-ddThh:mm:ss') Both methods are described in detail...

Hi I have some xml logs that i'm happily throwing logparser at. At the moment i'm stuck on how to get logparser to recognise the date time field as a date time field. The field itself is recognised as type (T) which i take to be time. However the field data itself is of the form yyyy-mm-ddThh:mm:ss The...

No problem. Thanks for trying.

I'm very sorry but I honestly don't have much of an idea what might be going on. :/ Gabriele could probably answer, but he hasn't been on the forums in a while (although he has said he hopes to return shortly)...

Here is a description of what I've tried. (Note: Where the domain or a userid was listed I replaced with DOMAIN, user1id, and user2id.) I saved an evt file to play with and used something similar to the following to generate the XML from the same EVT file: "C:\Program Files\Log Parser 2.2\logparser.exe...

If you can't control the special characters going into LP, I would think that URLESCAPE is likely your only hope for fixing the problem. So, when you use URLESCAPE, does the XML contain an escaped sequence in the record that you quoted above? What about if you pass 0 or -1 in as the codepage for the...