OK to answer my own question. Run the following commands grep -U "Final.828931" snf.log >1.txt cut -b26-41 1.txt >2.txt grep -U -f2.txt d:\spool\dec0207.log >3.txt egrep -U "\smd Tests failed|\smd Subject" 3.txt >4.txt
notepad 4.txt Now I have to read my 4.txt and figure out what I am going to do about it. Goran Jovanovic Omega Network Solutions > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Goran Jovanovic > Sent: Tuesday, February 07, 2006 8:39 PM > To: sniffer@SortMonster.com > Subject: RE: Re[4]: [sniffer] Bad Rule - 828931 > > I just ran the grep command on my log and I got 850 hits. > > Now is there a way to take the output of the grep command and use it > pull out the total weight of corresponding message from the declude log > file, or maybe the subject? > > Goran Jovanovic > Omega Network Solutions > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > > On Behalf Of David Sullivan > > Sent: Tuesday, February 07, 2006 7:47 PM > > To: Landry, William (MED US) > > Subject: Re[4]: [sniffer] Bad Rule - 828931 > > > > Hello William, > > > > Tuesday, February 7, 2006, 7:39:05 PM, you wrote: > > > > LWMU> grep -c "Final.*828931" c:\imail\declude\sniffer\logfile.log > > > > That's what I tried. Just figured out I forgot to capitalize the "F". > > It works. > > > > Confirmed - 22,055 > > > > I'm writing a program now to parse the sniffer log file, extract the > > file ID, lookup the id in sql server, determine quarantine > > location, extract q/d pair from quarantine and send to user. > > > > -- > > Best regards, > > David mailto:[EMAIL PROTECTED] > > > > > > > > This E-Mail came from the Message Sniffer mailing list. For > information > > and (un)subscription instructions go to > > http://www.sortmonster.com/MessageSniffer/Help/Help.html > > > This E-Mail came from the Message Sniffer mailing list. For information > and (un)subscription instructions go to > http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html