I constantly use this batch file to find in the Declude logs. I change the V_logday to the day of the log to search and the V_find to the term to find. (It's usual a specific mail id (Q7172144401ba4a6b or such) and I'll get all log pieces for that mail item.
set v_path=c:\declude\logs set v_logpath=c:\declude\logs rem - rem - set v_logday to 05* to search all May logs Rem - set V_logday to * to search all logs Rem - set v_logday to 0511 to search May 11 log set V_logday=1029 Rem - set v_find to what to search for. Use a period a wildcard in place of a space (Triggered.IS.Filter) set v_find="MAILFROM-REVDNS-MATCH" cd /d %v_path% if exist findlog.txt del findlog.txt grep -i -U %v_find% %v_logpath%\dec%v_logday%.log > FindinDecludeLog.txt ---------- Original Message ---------------------------------- From: "Serge" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Fri, 5 Nov 2004 00:22:00 -0000 >Bill >some time ago you mentioned putting together a short "grep" tutorial for >this list >was this ever posted ? if yes, can you email or repost ? >what would be a short grep batch file where we can enter an address >[EMAIL PROTECTED] as parameter and get all the lines off all the sessions with >mail to (or from) this address? >is there in easy way to do that ? >TIA > > > >----- Original Message ----- >From: "Bill Landry" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Sent: Thursday, November 04, 2004 9:38 PM >Subject: Re: [Declude.JunkMail] LOG Levels > > >> ----- Original Message ----- >> From: "Mark E. Smith" <[EMAIL PROTECTED]> >> >>> The problem right now is loading a 350mb (let alone 1.6GB) file with >>> notepad. :) >> >> Why would you want to open any log in notepad - use grep instead, it is >> lightning fast at parsing large log files. >> >> Bill >> >> --- >> [This E-mail was scanned for viruses by Declude Virus >> (http://www.declude.com)] >> >> --- >> This E-mail came from the Declude.JunkMail mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >> type "unsubscribe Declude.JunkMail". The archives can be found >> at http://www.mail-archive.com. >> > > >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.JunkMail". The archives can be found >at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
