I am trying to output event log entries to HTML and but of course the event details are wrapped.
How can I substitue the linefeed to the code <BR>?
Command Explaination: Show critical and warning events from the Application event log from the past 30 days where the event type is 0
logparser.exe -i:EVT "SELECT TimeGenerated,EventTypeName,SourceName,Strings INTO [Application].html FROM\\[SERVERNAME]\Application WHERE TimeGenerat ed > TO_TIMESTAMP(SUB(TO_INT(SYSTEM_TIMESTAMP()),2592000)) AND EventType IN (1;2 ) AND EventID IN (0) ORDER BY TimeGenerated DESC" -tpl:WinEvt.tpl
I have tried modifying the SELECT statement for things like:
- Changing Message for Strings
- REPLACE_CHR(Message,'\n','^<BR^>') as HTMLMsg
- REPLACE_CHR(Message,HEX_TO_ASC('46'),'.') as HTMLMsg
Any thoughts?