----- Original Message -----
From: "Scott Fisher" <[EMAIL PROTECTED]>
> I constantly use this batch file to find in the Declude logs.
> I change the V_logday to the day of the log to search
> and the V_find to the term to find. (It's usual a specific mail id
(Q7172144401ba4a6b or such) and I'll get all log pieces for that mail item.
>
> set v_path=c:\declude\logs
> set v_logpath=c:\declude\logs
> rem -
> rem - set v_logday to 05* to search all May logs
> Rem - set V_logday to * to search all logs
> Rem - set v_logday to 0511 to search May 11 log
> set V_logday=1029
> Rem - set v_find to what to search for. Use a period a wildcard in place
of a space (Triggered.IS.Filter)
> set v_find="MAILFROM-REVDNS-MATCH"
> cd /d %v_path%
> if exist findlog.txt del findlog.txt
> grep -i -U %v_find% %v_logpath%\dec%v_logday%.log > FindinDecludeLog.txt
Wow, if you are looking for a specific Q-ID, why go to so much trouble. Why
not just search for the Q-ID (minus the Q and extension in the Q-ID), for
example:
grep e508201c008e3423 m:\imail\spool\spam\log\dec1104.log
That will give you every line for the Q-ID searched on, in the order they
were written to the log.
If you also want all of the virus log entries for that same Q-ID:
grep e508201c008e3423 m:\imail\spool\virus\log\vir1104.log
And if you want to find all of the IMail log entries for that Q-ID, as well:
grep e508201c008e3423 m:\imail\spool\sys1104.txt
Bill
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
