Thanks guys! I tried this, but couldn't get it to work. I ended up using extract_prefix and extract_suffix, and *finally* got what I wanted. Thanks so much! Candee
On Fri, Jun 5, 2015 at 10:03 AM, Michael B. Smith <[email protected]> wrote: > I think Tony is correct. > > > > > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *Tony Patton > *Sent:* Friday, June 5, 2015 9:53 AM > *To:* Exchange List > *Subject:* Re: [Exchange] Log Parser Studio query help > > > > Hi Candee, > > I can't test this at the minute, but if you change the 0 to 1 in the first > extract_token, does it return the version? > > Tony > > On 5 Jun 2015 14:30, "Candee" <[email protected]> wrote: > > Does anyone use LPS 2.2 and create your own queries? > I'm trying to create a query to select substrings from cs-useragent. > > I started with their query ActiveSync: Apple Device/iOS Version Report. > Instead of adding a kazillion lines to it I thought it would be easier to > pull just the version numbers - ie: 1206.70 = 8.3 > > > > "CASE EXTRACT_TOKEN(cs(user-agent),0,'/') > > This works to get "Apple-iPhone7C2" > > Out of: 'Apple-iPhone7C1/1202.440' > > > > I'm trying to get the second part "1202.440" > > I tried CASE EXTRACT_TOKEN(cs(user-agent,'/',0) but get an error that the > second part has to be an integer > > > > Any help appreciated. > > Thanks all. > > Candee >
