LogParser Application vs LogParser Security?
-
Wednesday, November 21, 2012 1:30 AM
Hello,
I am trying to get the format (parameters positions) for the EventID 627 & 628 and using LogParser 2.2. It was working fine on Application Logs but seems not working on Security Log!!!
Syntax error?
Any idea?
Thanks,
DOm
System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager
- Edited by Felyjos Wednesday, November 21, 2012 1:31 AM
All Replies
-
Wednesday, November 21, 2012 5:04 AM
Hello,
I am trying to get the format (parameters positions) for the EventID 627 & 628 and using LogParser 2.2. It was working fine on Application Logs but seems not working on Security Log!!!
Syntax error?
Any idea?
Thanks,
DOm
System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager
This is a scripting forium and not a logparser forum. Post in the logparser secion of the platformforum.
Also your question has little meaning. Parameteres have names and not positions. See the LogParser examples for how to query eventlog files.
String sets (ReplaceemnetStrings) are numbered in the order they appear in the message body starting at zero.
¯\_(ツ)_/¯
-
Wednesday, November 21, 2012 4:07 PMModerator
Hi,
Sorry but this is not a LogParser forum. You need to ask your question in the LogParser forums.
Bill
- Edited by Bill_StewartMicrosoft Community Contributor, Moderator Wednesday, November 21, 2012 4:07 PM
- Proposed As Answer by Bill_StewartMicrosoft Community Contributor, Moderator Tuesday, November 27, 2012 11:03 PM

