Sawmill Discussion Forum - Setting up a config for Windows dumpel


	7.2.10

Sawmill Discussion Forum

Subject: "Setting up a config for Windows dumpel"

Archived thread - Read only
Previous Topic | Next Topic

Conferences Support Topic #1627
Printer-friendly copy Email this topic to a friend
Reading Topic #1627

Arian

unregistered user

Jul-23-04, 04:40 AM (PDT)

"Setting up a config for Windows dumpel"

Hello;

I'm setting up a configuration to read a Windows Event Log in "dumpel" format.

I wanted to use a customized dump string, but I couldn't get Sawmill to read anything. Then, I went to a vanilla dumpel format and tried a new configuration file.

Now when I run debug, I get "time/date field is corrupt" and no data in the database.

Any ideas?

I've tried swapping time and date in the dumpel configuration, but I still get the error. I "think" it's objecting to the time configuration of 10:30:02 AM. I don' think the config file likes the AM portion. How do I fix this???

Thanks

Arian

Printer-friendly page | Top

Arian

unregistered user

Jul-23-04, 04:54 AM (PDT)

1. "RE: Setting up a config for Windows dumpel"
In response to message #0

Also, I added AM/PM to the log configuration. Still no luck

Printer-friendly page | Top

Arian

unregistered user

Jul-23-04, 05:30 AM (PDT)

2. "RE: Setting up a config for Windows dumpel"
In response to message #1

OK, got the vanilla file to work. Now, I want to tweak the output so that I only get "dtITus" from the dumpel file. I would have to tweak the log format file as well, no?

Or will it ignore fields it doesn't see? Do I have to REM those fields out?

Printer-friendly page | Top

i21
Member since Mar-21-02
1933 posts

Jul-23-04, 05:47 AM (PDT)

Click to add this user to your buddy list

3. "RE: Setting up a config for Windows dumpel"
In response to message #1

If Sawmill has never seen this format of log I can understand why there may be problems. Sawmill can read many date/time formats:

http://www.sawmill.net/cgi-bin/sawmilldocs?ho+ldf
http://www.sawmill.net/cgi-bin/sawmilldocs?ho+ltf

If it is one of these, we can modify/create a plug-in for this format of logs, or if you can create a log format that is supported:

http://www.sawmill.net/cgi-bin/sawmilldocs?ho+faq-logformats

If neither of these help then send me a sample of log you want to analyse and I will produce a plug-in for it.

Cheers,
--
Graham
Sawmill UK

Printer-friendly page | Top

Conferences | Topics | Previous Topic | Next Topic

Home Lite Professional Enterprise Samples FAQ Downloads Purchase Manual Support Contact Us