none
LogParser Application vs LogParser Security?

    Question

  • Hello,

    I am trying to get the format (parameters positions) for the EventID  627 & 628 and using LogParser 2.2. It was working fine on Application Logs but seems not working on Security Log!!!

    Syntax error?

    Any idea?

    Thanks,

    DOm



    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager



    • Edited by Felyjos Wednesday, November 21, 2012 1:31 AM
    Wednesday, November 21, 2012 1:30 AM

Answers

  • Hello,

    I am trying to get the format (parameters positions) for the EventID  627 & 628 and using LogParser 2.2. It was working fine on Application Logs but seems not working on Security Log!!!

    Syntax error?

    Any idea?

    Thanks,

    DOm



    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager



    This is a scripting forium and not a logparser forum.  Post in the logparser secion of the platformforum.

    Also your question has little meaning.  Parameteres have names and not positions.  See the LogParser examples for how to query eventlog files.

    String sets (ReplaceemnetStrings) are numbered in the order they appear in the message body starting at zero.


    ¯\_(ツ)_/¯

    Wednesday, November 21, 2012 5:04 AM

All replies

  • Hello,

    I am trying to get the format (parameters positions) for the EventID  627 & 628 and using LogParser 2.2. It was working fine on Application Logs but seems not working on Security Log!!!

    Syntax error?

    Any idea?

    Thanks,

    DOm



    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager



    This is a scripting forium and not a logparser forum.  Post in the logparser secion of the platformforum.

    Also your question has little meaning.  Parameteres have names and not positions.  See the LogParser examples for how to query eventlog files.

    String sets (ReplaceemnetStrings) are numbered in the order they appear in the message body starting at zero.


    ¯\_(ツ)_/¯

    Wednesday, November 21, 2012 5:04 AM
  • Hi,

    Sorry but this is not a LogParser forum. You need to ask your question in the LogParser forums.

    Bill


    Wednesday, November 21, 2012 4:07 PM
    Moderator