hello
I need parse message like this:
dev01:45 Feb 05 18:07:23 ogarcia 10.10.10.10 "logout" DSCTEST 45:987
The trouble is that every after user ('ogarcia') are separate with tabulation (TAB). Well I kwon that for " character have to use & but I dont have a clue what have to use for TAB.
I really appreciate any help.
In the log parser tool you can just treat them as spaces. No need to specify tabs as it doesn’t appear to have spaces in the values