Home Dashboard Directory Help
Search

Configuration file for SCCM TraceFiles - Text Log Adapter by Mikesch72


Status: 

Active


1
0
Sign in
to vote
Type: Suggestion
ID: 813445
Opened: 1/10/2014 1:26:27 AM
Access Restriction: Public
0
Workaround(s)
view

Description

I try to parse Logfiles from SCCM 2007 (for example from ccmexec.log in C:\Windows\CCM\Logs), but I have no idea how to merge the TIME- and DATE-Attribute into a TIMESTAMP-Attribute :-(. Here my config so far:

message SMSTrace with
    EntryInfo { Regex = @"<!\[LOG\[(?<Sentence>.*)\]LOG\]!><time=""(?<Time>.*)"" date=""(?<Date>.*)"" component=""(?<Component>.*)"" context=""(?<Context>.*)"" type=""(?<TraceType>\d+)"" thread=""(?<ThreadId>\d+)"" file=""(?<FileName>.*)"">" } : LogEntry
{
    string Sentence;
    string Time;
    string Date;
    string Component;
    string Context;
    ushort TraceType;
    uint ThreadId;
    string FileName;
}
Details
Sign in to post a comment.
Posted by Paul E Long on 5/19/2014 at 1:16 PM
Sorry for the delay. It seems our backend system didn't pick this up properly. I commented on a solution that you could use in the forums. Can you tell me if this thread gives you the info you need?

http://social.technet.microsoft.com/Forums/en-US/751c9ce6-6f24-4295-91df-3460371a36b6/how-to-parse-wpp-format-timestamps-?forum=messageanalyzer

Thanks,

Paul
Sign in to post a workaround.