hello
I need parse message like this:
dev01:45 Feb 05 18:07:23 ogarcia 10.10.10.10 "logout" DSCTEST 45:987
The trouble is that every after user ('ogarcia') are separate with tabulation (TAB). Well I kwon that for " character have to use & but I dont have a clue what have to use for TAB.
I really appreciate any help.
Well I always write my parser on notepad++, perhaps the ESI tools maps the TAB as SPACES. But there is a trouble that I can see, for this sample messages:
dev01:45 Feb 05 18:07:23 ogarcia 10.10.10.10 "logout" DSCTEST 45:987
dev01:45 Feb 05 18:07:23 admin_socglcli 10.10.10.10 "logout" DSCTEST 45:987
dev01:45 Feb 05 18:07:23 os 10.10.10.10 "bad_password_or_bad_name" GPPPLESCLI 45:999
The numbers of SPACES between fields is variable (Sadly this can't see on this form), dependent of the length the string field, so if ESI tools maps TAB as SPACES it would be a trouble. That's why I thought that must exist a value (like " for ") for TAB.
In the log parser tool you can just treat them as spaces. No need to specify tabs as it doesn’t appear to have spaces in the values