Hi all,
Im new here and just stumbled across log parser 2.2 which seems to the tool MS wants you to use to parse iis and exchange logs :)
But oh my god how i find it hard to understand. That is why i post here :)
Now what i really need is to send my exchange logs to my syslog server. More over im talking about the RPC client access logs but thats just because i decided to start with those. In the long run i would need to parse all my IIS and Exchange logs to my syslog server.
Also i need to structur the information so when i search for them in the syslog server they give some sort of sense. if you take the RCP log its just one long strand of text seperated with commad.
Another tricky thing is that i presume i would need to run my log parse command in a schduled job. And so if it possible i would like to have the command take the date into consideration. If I just parse *.log and run the job every day i would assume that i would get double entries in the syslog since the same log files along with the new ones would be send every day.
I have found serveral post about different IIS logs being modified and send to file and even syslog but not when we are talking RPC logs and other exchange logs, except for OWA logs which i presume is more IIS related.
Can anyone here point me in the right direction?
THANKS
Casper