Logparser on Exchange 2007 message tracking log

I tried to use logparser to extract data from exchange message tracking log.

Error: WHERE clause: Syntax Error: unknown field 'recipient-address'.
The closest match for input format 'W3C' is 'date-time,client-ip,client-hostname

is same as below link

Please help
LVL 19
Who is Participating?
suriyaehnopConnect With a Mentor Author Commented:
problem solved.

the correct syntax is:

LogParser -i:CSV -nskiplines:4  "SELECT * FROM c:\log\MSGTRK20090602-1.log WHERE recipient-address like 'user@domain.com'"
Malli BoppeCommented:
Whats is that your are trying to do?
We might suggest using other options.

I have used eldump in the past which is better then logparser

suriyaehnopAuthor Commented:
What I'm to do is, I have a bunch of message tracking log restored from backup.

I want to search if any tracking log has recipient-address as a specified and produced the report.

I saw this http://msexchangetips.blogspot.com/2006/09/exchange-exporting-and-querying.html

The poster show how do use logparser but i'm failed although follow the same command
suriyaehnopAuthor Commented:
Please help to cancel this
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.