Logging 将文件名作为字段包含在LogParser中
我有以下LogParser 2.2查询,它将从Exchange 2010集线器传输的SMTP日志中查找所有SMTP错误,并将其输出到SQL Server 2008 R2数据库。这很好,但我想添加错误产生的日志文件的名称作为字段名(这将使跟踪有关错误的更多详细信息更加容易)。是否有办法将日志文件名包括在字段列表中Logging 将文件名作为字段包含在LogParser中,logging,smtp,exchange-server-2010,logparser,Logging,Smtp,Exchange Server 2010,Logparser,我有以下LogParser 2.2查询,它将从Exchange 2010集线器传输的SMTP日志中查找所有SMTP错误,并将其输出到SQL Server 2008 R2数据库。这很好,但我想添加错误产生的日志文件的名称作为字段名(这将使跟踪有关错误的更多详细信息更加容易)。是否有办法将日志文件名包括在字段列表中 "C:\Program Files (x86)\Log Parser 2.2\logparser.exe" "SELECT 'Prospect' as ExchangeServe
"C:\Program Files (x86)\Log Parser 2.2\logparser.exe"
"SELECT
'Prospect' as ExchangeServer,
'Receive' as SmtpType,
TO_LOCALTIME(TO_TIMESTAMP(STRCAT(STRCAT(EXTRACT_PREFIX(TO_STRING([#Fields: date-time]),0,'T'),' '),EXTRACT_PREFIX(EXTRACT_SUFFIX(TO_STRING([#Fields: date-time]),0,'T'),0,'.')),'yyyy-MM-dd HH:mm:ss')) as Timestamp,
connector-id as Connector,
EXTRACT_PREFIX(local-endpoint,0,':') as ServerIP,
TO_INT(EXTRACT_SUFFIX(local-endpoint,0,':')) as ServerPort,
REVERSEDNS(EXTRACT_PREFIX(local-endpoint,0,':')) as ServerName,
EXTRACT_PREFIX(remote-endpoint,0,':') as ClientIP,
TO_INT(EXTRACT_SUFFIX(remote-endpoint,0,':')) as ClientPort,
REVERSEDNS(EXTRACT_PREFIX(remote-endpoint,0,':')) as ClientName,
TO_INT(EXTRACT_PREFIX(data,0,' ')) as Error, event as Event, data as Data,
context as Context
INTO SmtpLog
FROM 'E:\Log Files\SMTP\Receive\*.LOG'
WHERE (event = '>') and ((data LIKE '5%%') or (data like '4%%'))"
-i:CSV -nSkipLines:4 -o:SQL -server:DbServer -database:DbName -createTable:ON -clearTable:ON
在所选列中,添加Logfilename
您还可能会发现LogRow很有用 在所选列中,添加日志文件名
您还可能会发现LogRow很有用 谢谢你!对于CSV文件,LogFileName和LogRow字段名称不正确,但当我尝试它们时,错误消息为我提供了正确的名称。作为参考,当您的输入格式为CSV(-i:CSV)时,请使用“文件名”和“行号”字段。谢谢!对于CSV文件,LogFileName和LogRow字段名称不正确,但当我尝试它们时,错误消息为我提供了正确的名称。作为参考,当输入格式为CSV(-i:CSV)时,请使用“文件名”和“行号”字段。