Hi All!
I should create a new custom netwitness log parsers for a database from syslog, but the format is like XML, so the esi tool can not cope with the <> characters.
Log Sample:
May 25 07:21:32 db db: <ROW><DB_NAME>db045</DB_NAME><ACTION_NAME>LOGOFF</ACTION_NAME><RETURN_CODE>0</RETURN_CODE>
May 25 07:21:32 db db: <ROW><DB_NAME>db045</DB_NAME><ACTION_NAME>LOGON</ACTION_NAME><RETURN_CODE>0</RETURN_CODE>
I set to bold the variables we need to parse. The other part of the log is static. Is there a way to do this?
Thank You, Erika
Erika
Take a look at this code. It's simple (and untested obviously) but I think it will help point you in the right direction on how to use the ESI tool for this format log.