Solved

Logparser on Exchange 2007 message tracking log

Posted on 2013-10-22
4
869 Views
Last Modified: 2013-10-29
I tried to use logparser to extract data from exchange message tracking log.


Error: WHERE clause: Syntax Error: unknown field 'recipient-address'.
The closest match for input format 'W3C' is 'date-time,client-ip,client-hostname
,server-ip,server-hostname,source-context,connector-id,source,event-id,internal-
message-id,message-id,recipient-address,recipient-status,total-bytes,recipient-c
ount,related-recipient-address,reference,message-subject,sender-address,return-p
ath,message-info'.

is same as below link
http://forums.iis.net/t/1158339.aspx

Please help
0
Comment
Question by:suriyaehnop
  • 3
4 Comments
 
LVL 23

Expert Comment

by:Malli Boppe
ID: 39593251
Whats is that your are trying to do?
We might suggest using other options.


I have used eldump in the past which is better then logparser

http://www.ibt.ku.dk/jesper/eldump/
0
 
LVL 18

Author Comment

by:suriyaehnop
ID: 39593376
What I'm to do is, I have a bunch of message tracking log restored from backup.

I want to search if any tracking log has recipient-address as a specified and produced the report.

I saw this http://msexchangetips.blogspot.com/2006/09/exchange-exporting-and-querying.html

The poster show how do use logparser but i'm failed although follow the same command
0
 
LVL 18

Accepted Solution

by:
suriyaehnop earned 0 total points
ID: 39599504
problem solved.

the correct syntax is:

LogParser -i:CSV -nskiplines:4  "SELECT * FROM c:\log\MSGTRK20090602-1.log WHERE recipient-address like 'user@domain.com'"
0
 
LVL 18

Author Closing Comment

by:suriyaehnop
ID: 39608137
Please help to cancel this
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Exchange Server 2013 crash 3 19
Exchange 2007 3 35
E-mail delayed during DNS server reboot 8 39
exchange 2007 9 12
Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
As tax season makes its return, so does the increase in cyber crime and tax refund phishing that comes with it
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question