Logparser on Exchange 2007 message tracking log

I tried to use logparser to extract data from exchange message tracking log.


Error: WHERE clause: Syntax Error: unknown field 'recipient-address'.
The closest match for input format 'W3C' is 'date-time,client-ip,client-hostname
,server-ip,server-hostname,source-context,connector-id,source,event-id,internal-
message-id,message-id,recipient-address,recipient-status,total-bytes,recipient-c
ount,related-recipient-address,reference,message-subject,sender-address,return-p
ath,message-info'.

is same as below link
http://forums.iis.net/t/1158339.aspx

Please help
LVL 19
suriyaehnopAsked:
Who is Participating?
 
suriyaehnopConnect With a Mentor Author Commented:
problem solved.

the correct syntax is:

LogParser -i:CSV -nskiplines:4  "SELECT * FROM c:\log\MSGTRK20090602-1.log WHERE recipient-address like 'user@domain.com'"
0
 
Malli BoppeCommented:
Whats is that your are trying to do?
We might suggest using other options.


I have used eldump in the past which is better then logparser

http://www.ibt.ku.dk/jesper/eldump/
0
 
suriyaehnopAuthor Commented:
What I'm to do is, I have a bunch of message tracking log restored from backup.

I want to search if any tracking log has recipient-address as a specified and produced the report.

I saw this http://msexchangetips.blogspot.com/2006/09/exchange-exporting-and-querying.html

The poster show how do use logparser but i'm failed although follow the same command
0
 
suriyaehnopAuthor Commented:
Please help to cancel this
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.