Solved

Logparser on Exchange 2007 message tracking log

Posted on 2013-10-22
4
881 Views
Last Modified: 2013-10-29
I tried to use logparser to extract data from exchange message tracking log.


Error: WHERE clause: Syntax Error: unknown field 'recipient-address'.
The closest match for input format 'W3C' is 'date-time,client-ip,client-hostname
,server-ip,server-hostname,source-context,connector-id,source,event-id,internal-
message-id,message-id,recipient-address,recipient-status,total-bytes,recipient-c
ount,related-recipient-address,reference,message-subject,sender-address,return-p
ath,message-info'.

is same as below link
http://forums.iis.net/t/1158339.aspx

Please help
0
Comment
Question by:suriyaehnop
  • 3
4 Comments
 
LVL 23

Expert Comment

by:Malli Boppe
ID: 39593251
Whats is that your are trying to do?
We might suggest using other options.


I have used eldump in the past which is better then logparser

http://www.ibt.ku.dk/jesper/eldump/
0
 
LVL 18

Author Comment

by:suriyaehnop
ID: 39593376
What I'm to do is, I have a bunch of message tracking log restored from backup.

I want to search if any tracking log has recipient-address as a specified and produced the report.

I saw this http://msexchangetips.blogspot.com/2006/09/exchange-exporting-and-querying.html

The poster show how do use logparser but i'm failed although follow the same command
0
 
LVL 18

Accepted Solution

by:
suriyaehnop earned 0 total points
ID: 39599504
problem solved.

the correct syntax is:

LogParser -i:CSV -nskiplines:4  "SELECT * FROM c:\log\MSGTRK20090602-1.log WHERE recipient-address like 'user@domain.com'"
0
 
LVL 18

Author Closing Comment

by:suriyaehnop
ID: 39608137
Please help to cancel this
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

MS Outlook is a world-class email client application that is mainly used for e-communication globally.  In this article, we will discuss the basic idea about MS Outlook, its advanced features, and types of MS Outlook File formats.
A phishing scam that claims a recipient’s credit card details have been “suspended” is the latest trend in spoof emails.
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
how to add IIS SMTP to handle application/Scanner relays into office 365.

808 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question