If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

 
Go Back  dBforums > Database Server Software > MySQL > Breaking up a data field

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 10-04-06, 13:01
nate_boit nate_boit is offline
Registered User
 
Join Date: Oct 2006
Posts: 1
Breaking up a data field

I am using a program to monitor event logs, which in turn saves the events to MySQL. However, the entire Windows Event log is placed into one field. I would like to somehow break that up to only display certain non-consecutive parts of the string. For example:

Code:
Logon Failure:
Reason:    Account logon time restriction violation
    User Name:    joebob
    Domain:        DOMAIN
    Logon Type:    10
    Logon Process:    User32  
    Authentication Package:    Negotiate
    Workstation Name:    JOEBOB_COMP
    Caller User Name:    JOEBOB_COMP
    Caller Domain:    DOMAIN
    Caller Logon ID:    (0x0,0x3E7)
    Caller Process ID:    5324
    Transited Services:    -
    Source Network Address:    192.168.1.14
    Source Port:    4639
All of that is placed into one field and formatted by carriage return line feeds. Is there any way within a MySQL component or any other program out there that would break that up and only display specific sections? Such as only the reason, user name,and workstation? Also, not all events have the same "sections" such as User Name, Domain, etc.

And if there is not a program or way to do it with queries, then how would i go about coding something to break it into an array, or break each section into it's own seperate field by using the carriage returns? From there i want to generate reports that include only sections of the event log.

Thanks
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On