Michael,
The command you provided worked perfectly, thanks so much!
- Sean
On Wed, Aug 11, 2010 at 4:47 PM, Michael B. Smith <mich...@smithcons.com>wrote:
> So? Does logparser work for you otherwise?
>
>
>
> LogParser.exe -i:W3C -o:TSV "select TO_TIMESTAMP( STRCAT( '2010-09-10',
> STRCAT(' ', STRREV( SUB( STRREV( TIME ) , 'TMG ') ))),'yyyy-MM-dd h:m:s') AS
> DateTime, Recipient-Address AS RcptAddress, MSGID, Number-Recipients AS
> NumRcpts, Message-Subject AS Subject, Sender-Address AS Sender from
> 20100812.log to myfile.tab GROUP BY DateTime, MSGID, Recipient-Address,
> Number-Recipients, Message-Subject, Sender-Address" -filemode:0
>
>
>
> Regards,
>
>
>
> Michael B. Smith
>
> Consultant and Exchange MVP
>
> http://TheEssentialExchange.com <http://theessentialexchange.com/>
>
>
>
> *From:* Sean Martin [mailto:seanmarti...@gmail.com]
> *Sent:* Wednesday, August 11, 2010 8:42 PM
>
> *To:* MS-Exchange Admin Issues
> *Subject:* Re: LogParser and Message Tracking
>
>
>
> Yes, it is enabled. I can find the subject in various logs manually, just
> trying to figure why logparser wont find it.
>
>
> On Aug 11, 2010, at 4:34 PM, "Michael B. Smith" <mich...@smithcons.com>
> wrote:
>
> Well, the number one question I have is whether you have “subject
> logging” turned on for that Exchange server…
>
>
>
> Regards,
>
>
>
> Michael B. Smith
>
> Consultant and Exchange MVP
>
> http://TheEssentialExchange.com <http://theessentialexchange.com/>
>
>
>
> *From:* Sean Martin [mailto:seanmarti...@gmail.com]
> *Sent:* Wednesday, August 11, 2010 4:12 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* LogParser and Message Tracking
>
>
>
> Hello all,
>
>
> I'm trying to use log parser against my Exchange 2003 Message Tracking logs
> to gather some data. Initially, I'm just trying to count the number of
> e-mail messages with a specific subject line.
>
>
>
> I'm running the following command against a log that I know contains
> messages with the subject in question, however my results are returning 0
> instances. Here's the command I'm running:
>
>
>
> logparser.exe -i:W3C "SELECT * FROM '\\ServerName\Path\LogName' WHERE
> Message-Subject like'ExampleSubject'" -O:CSV > c:\test.csv
>
>
>
> I'm actually calling this from another batch script so that I can pass the
> log name as a variable, since my goal is to search all logs. I've also tried
> specifying a single log file name that I know contains what I'm looking for.
>
>
>
> Ultimately I'd like to capture the sender and recipient information for all
> messages sent with a specific subject, but I think I need to at least get an
> idea of how many messages I'm dealing with.
>
>
> Any help would be greatly appreciated.
>
>
>
> - Sean
>
>
