powershell

read the attachment Exchange log file

missing

Thx.
myTest.txt

Like that?

$userName = 'abc\johnlee'
$log = 'C:\Temp\myTest.txt'
$header = (Get-Content -Path $logFile -TotalCount 1) -replace '\A#Fields:\s' -split ' '
Get-Content -Path $logFile | Select-Object -Skip 1 | ConvertFrom-Csv -Header $header -Delimiter ' ' |
	Where-Object {$_.'cs-username' -eq $userName} |
	Select-Object -Property Date, Time, @{n='Username'; e={$_.'cs-username'}}, @{n='IP'; e={$_.'s-ip'}}, @{n='UserAgent'; e={$_.'cs(User-Agent)'}}

Select allOpen in new window

Try the following script....

param(
$logFilepath = "C:\Users\Desktop\departed-user.txt",
$USERNAME="user"
)

$logdata = Get-Content $logfilepath
$CsvHeader=$logdata[3].Replace("#Fields: ","")
$user=$logdata | ? {$_ -match $USERNAME}

$FinalData=@()
$FinalData+=$CsvHeader
$FinalData+=$user

$Report=@()
foreach ($line in $FinalData){
        $newline=$line.replace(" ",",")
        $Report+=$newline }
$report

Select allOpen in new window

Thx.

$header = (Get-Content -Path $logFile -TotalCount 1) -replace '\A#Fields:\s' -split ' '

1. What does "-TotalCount 1" and  '\A#xxx:\s' mean ?
2. Is it possible to format the output into single line for each matched items ?

Thx

Sorry, there is few dummy lines before the heading ? How can i skip it ?

Thx
myTest.txt

Thx