{"id":632,"date":"2010-03-12T19:01:52","date_gmt":"2010-03-12T18:01:52","guid":{"rendered":"http:\/\/blog.capdata.fr\/?p=632"},"modified":"2019-09-13T15:01:00","modified_gmt":"2019-09-13T14:01:00","slug":"scruter-les-journaux-devenements-windows-avec-logparser","status":"publish","type":"post","link":"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/","title":{"rendered":"Scruter les journaux d&#8217;\u00e9v\u00e8nements Windows avec LogParser"},"content":{"rendered":"<a class=\"synved-social-button synved-social-button-share synved-social-size-24 synved-social-resolution-single synved-social-provider-twitter nolightbox\" data-provider=\"twitter\" target=\"_blank\" rel=\"nofollow\" title=\"Share on Twitter\" href=\"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Fblog.capdata.fr%2Findex.php%2Fwp-json%2Fwp%2Fv2%2Fposts%2F632&#038;text=Article%20sur%20le%20blog%20de%20la%20Capdata%20Tech%20Team%20%3A%20\" style=\"font-size: 0px;width:24px;height:24px;margin:0;margin-bottom:5px;margin-right:5px\"><img loading=\"lazy\" decoding=\"async\" alt=\"twitter\" title=\"Share on Twitter\" class=\"synved-share-image synved-social-image synved-social-image-share\" width=\"24\" height=\"24\" style=\"display: inline;width:24px;height:24px;margin: 0;padding: 0;border: none;box-shadow: none\" src=\"https:\/\/blog.capdata.fr\/wp-content\/plugins\/social-media-feather\/synved-social\/image\/social\/regular\/48x48\/twitter.png\" \/><\/a><a class=\"synved-social-button synved-social-button-share synved-social-size-24 synved-social-resolution-single synved-social-provider-linkedin nolightbox\" data-provider=\"linkedin\" target=\"_blank\" rel=\"nofollow\" title=\"Share on Linkedin\" href=\"https:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https%3A%2F%2Fblog.capdata.fr%2Findex.php%2Fwp-json%2Fwp%2Fv2%2Fposts%2F632&#038;title=Scruter%20les%20journaux%20d%E2%80%99%C3%A9v%C3%A8nements%20Windows%20avec%20LogParser\" style=\"font-size: 0px;width:24px;height:24px;margin:0;margin-bottom:5px;margin-right:5px\"><img loading=\"lazy\" decoding=\"async\" alt=\"linkedin\" title=\"Share on Linkedin\" class=\"synved-share-image synved-social-image synved-social-image-share\" width=\"24\" height=\"24\" style=\"display: inline;width:24px;height:24px;margin: 0;padding: 0;border: none;box-shadow: none\" src=\"https:\/\/blog.capdata.fr\/wp-content\/plugins\/social-media-feather\/synved-social\/image\/social\/regular\/48x48\/linkedin.png\" \/><\/a><a class=\"synved-social-button synved-social-button-share synved-social-size-24 synved-social-resolution-single synved-social-provider-mail nolightbox\" data-provider=\"mail\" rel=\"nofollow\" title=\"Share by email\" href=\"mailto:?subject=Scruter%20les%20journaux%20d%E2%80%99%C3%A9v%C3%A8nements%20Windows%20avec%20LogParser&#038;body=Article%20sur%20le%20blog%20de%20la%20Capdata%20Tech%20Team%20%3A%20:%20https%3A%2F%2Fblog.capdata.fr%2Findex.php%2Fwp-json%2Fwp%2Fv2%2Fposts%2F632\" style=\"font-size: 0px;width:24px;height:24px;margin:0;margin-bottom:5px\"><img loading=\"lazy\" decoding=\"async\" alt=\"mail\" title=\"Share by email\" class=\"synved-share-image synved-social-image synved-social-image-share\" width=\"24\" height=\"24\" style=\"display: inline;width:24px;height:24px;margin: 0;padding: 0;border: none;box-shadow: none\" src=\"https:\/\/blog.capdata.fr\/wp-content\/plugins\/social-media-feather\/synved-social\/image\/social\/regular\/48x48\/mail.png\" \/><\/a><p>Un petit post sur un outil bien pratique pour tous ceux qui rament pour \u00e9crire des scripts sous Windows. Un des outils indispensables dont toute production doive se doter est un analyseur de journaux d&#8217;erreur.<\/p>\n<p><strong>Logparser <\/strong>est un petit ex\u00e9cutable fourni gratuitement par Microsoft et qui permet de lire des fichiers structur\u00e9s propri\u00e9taires tels que les eventlogs *.EVT, mais aussi les fichiers CVS, ETW, REG, etc&#8230; Tout d&#8217;abord il s&#8217;agit de le <a title=\"Logparser 2.2\" href=\"http:\/\/www.google.com\/url?sa=t&amp;source=web&amp;ct=res&amp;cd=1&amp;ved=0CAkQFjAA&amp;url=http%3A%2F%2Fwww.microsoft.com%2Fdownloads%2Fdetails.aspx%3FFamilyID%3D890cd06b-abf8-4c25-91b2-f8d975cf8c07&amp;rct=j&amp;q=download+logparser&amp;ei=m0-aS6yaLcT04gbn-fl7&amp;usg=AFQjCNGYcYCEUI2OdAX2GV_EO6ETNHqXnA&amp;sig2=vVABqIEJDhihHTm_mfP7CQ\">t\u00e9l\u00e9charger<\/a> et de l&#8217;installer en trois ou quatre clics. Je passe rapidement sur l&#8217;install, il faudra juste bien penser \u00e0 ajouter le chemin de logparser.exe dans votre PATH.<\/p>\n<p>L&#8217;avantage principal est qu&#8217;il utilise un pseudo langage proche du SQL pour effectuer des recherches. Par exemple, si je veux remonter les 3 derni\u00e8res erreurs dans le journal Application :<\/p>\n<pre>$ logparser \"SELECT TOP 3 TimeGenerated, SourceName, Message\r\nfrom Application\r\nwhere eventtype=1\r\norder by TimeGenerated desc\" -i:EVT -stats:OFF<\/pre>\n<pre>TimeGenerated\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0     SourceName\u00a0     Message\r\n-------------------     -----------     ------------------------------------------------\r\n2010-03-11 13:03:39     MSSQLSERVER     Database mirroring connection error 2 'Connection ...\r\n2010-03-11 13:03:17     MSSQLSERVER     Database mirroring connection error 4 '64...\r\n2010-03-11 13:02:57     MSSQLSERVER     The mirroring connection to \"tcp:\/\/192...<\/pre>\n<p>On peut utiliser le mot-cl\u00e9 &#8216;<em>into<\/em>&#8216; apr\u00e8s le SELECT pour indiquer que l&#8217;on souhaite placer le r\u00e9sultat dans un fichier. La r\u00e9partition des codes erreurs dans les journaux d&#8217;\u00e9v\u00e8nements se fait comme suit:<\/p>\n<pre>$ logparser \"select distinct EventTypeName, EventType\r\nfrom Application\" -i:EVT -stats:OFF\r\n\r\nEventTypeName\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 EventType\r\n------------------- ---------\r\nInformation event\u00a0\u00a0 4\r\nSuccess event\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\r\nWarning event\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 2\r\nError event\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1\r\nFailure Audit event 16<\/pre>\n<p>On recherchera donc en priorit\u00e9 les eventtype = 1.<\/p>\n<p>Parmi les options int\u00e9ressantes:<\/p>\n<p><strong>-i<\/strong>: Donne le type d&#8217;entr\u00e9e du fichier. exemple, -i:EVT indique que l&#8217;on souhaite lire un fichier *.evt. S&#8217;il n&#8217;est pas indiqu\u00e9, logparser le trouve tout seul en fonction de l&#8217;entr\u00e9e.<br \/>\n<strong>-o<\/strong>: Donne le format de sortie. Par exemple -o:XML pour \u00e9crire au format XML. S&#8217;il n&#8217;est pas indiqu\u00e9, logparser le trouve tout seul en fonction du fichier indiqu\u00e9 dans la clause &#8216;<em>into<\/em>&#8216;.<br \/>\n<strong>-stats<\/strong>: ON\/OFF: si les stats sont indiqu\u00e9es, alors logparser renvoie le nombre de lignes trait\u00e9es et le temps pass\u00e9.<br \/>\n<strong>-q<\/strong>: ON\/OFF: mode quiet, par exemple pour \u00e9liminer les ent\u00eates.<\/p>\n<p>Il poss\u00e8de \u00e9galement des fonction d&#8217;agr\u00e9gation de type <em>GROUP BY \/ HAVING&#8230; <\/em>Par exemple pour ramener le nombre d&#8217;erreurs par Source:<\/p>\n<pre>$ logparser \"SELECT SourceName, count(*)\r\nfrom Application where EventType = 1\r\ngroup by SourceName order by count(*) desc\"\r\n-i:EVT -stats:OFF\r\n\r\nSourceName\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 COUNT(ALL *)\r\n--------------------------------- ------------\r\nMSSQLSERVER\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 83\r\nWinlogon\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 30\r\nSoftware Licensing Service\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 2\r\nPerflib\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 2\r\n.NET Runtime Optimization Service 2\r\nSideBySide\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 2\r\nSQLDIAG\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1<\/pre>\n<p>D\u00e8s lors il devient facile de cr\u00e9er un script qui va r\u00e9guli\u00e8rement ex\u00e9cuter une recherche des erreurs remont\u00e9es dans les journaux <em>Application <\/em>et <em>System<\/em>. Nous pouvons utiliser un simple fichier par exemple pour stocker la derni\u00e8re ligne lue \u00e0 chaque passage, et nous permettre de repartir de cette ligne \u00e0 l&#8217;ex\u00e9cution suivante:<\/p>\n<pre>$ logparser \"SELECT MAX(RecordNumber) into E:\\maxrecod.app.log FROM Application\"\r\n-i:EVT -stats:OFF -q:ON\r\n$ cat E:\/maxrecod.app.log\r\n3597<\/pre>\n<p>&#8230; et dans un script, affecter le contenu du fichier dans une variable, et utiliser la variable dans une nouvelle recherche. Par exemple sous cygwin:<\/p>\n<pre>MAXRECORD=$(cat E:\/maxrecod.app.log)\r\nif [ ! -z ${MAXRECORD} ]\r\nthen\r\n      logparser \"SELECT TimeGenerated, SourceName, Message into E:\/Application.err\r\n      from Application where EventType=1 and RecordNumber &gt;= ${MAXRECORD}\"\u00a0\r\n      -i:EVT -stats:OFF -q:ON\r\nelse\r\n      echo \"borne invalide\"\r\nfi<\/pre>\n<p>A+. David\u00a0 B.<\/p>\n<p>&nbsp;<\/p>\n<a class=\"synved-social-button synved-social-button-share synved-social-size-24 synved-social-resolution-single synved-social-provider-twitter nolightbox\" data-provider=\"twitter\" target=\"_blank\" rel=\"nofollow\" title=\"Share on Twitter\" href=\"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Fblog.capdata.fr%2Findex.php%2Fwp-json%2Fwp%2Fv2%2Fposts%2F632&#038;text=Article%20sur%20le%20blog%20de%20la%20Capdata%20Tech%20Team%20%3A%20\" style=\"font-size: 0px;width:24px;height:24px;margin:0;margin-bottom:5px;margin-right:5px\"><img loading=\"lazy\" decoding=\"async\" alt=\"twitter\" title=\"Share on Twitter\" class=\"synved-share-image synved-social-image synved-social-image-share\" width=\"24\" height=\"24\" style=\"display: inline;width:24px;height:24px;margin: 0;padding: 0;border: none;box-shadow: none\" src=\"https:\/\/blog.capdata.fr\/wp-content\/plugins\/social-media-feather\/synved-social\/image\/social\/regular\/48x48\/twitter.png\" \/><\/a><a class=\"synved-social-button synved-social-button-share synved-social-size-24 synved-social-resolution-single synved-social-provider-linkedin nolightbox\" data-provider=\"linkedin\" target=\"_blank\" rel=\"nofollow\" title=\"Share on Linkedin\" href=\"https:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https%3A%2F%2Fblog.capdata.fr%2Findex.php%2Fwp-json%2Fwp%2Fv2%2Fposts%2F632&#038;title=Scruter%20les%20journaux%20d%E2%80%99%C3%A9v%C3%A8nements%20Windows%20avec%20LogParser\" style=\"font-size: 0px;width:24px;height:24px;margin:0;margin-bottom:5px;margin-right:5px\"><img loading=\"lazy\" decoding=\"async\" alt=\"linkedin\" title=\"Share on Linkedin\" class=\"synved-share-image synved-social-image synved-social-image-share\" width=\"24\" height=\"24\" style=\"display: inline;width:24px;height:24px;margin: 0;padding: 0;border: none;box-shadow: none\" src=\"https:\/\/blog.capdata.fr\/wp-content\/plugins\/social-media-feather\/synved-social\/image\/social\/regular\/48x48\/linkedin.png\" \/><\/a><a class=\"synved-social-button synved-social-button-share synved-social-size-24 synved-social-resolution-single synved-social-provider-mail nolightbox\" data-provider=\"mail\" rel=\"nofollow\" title=\"Share by email\" href=\"mailto:?subject=Scruter%20les%20journaux%20d%E2%80%99%C3%A9v%C3%A8nements%20Windows%20avec%20LogParser&#038;body=Article%20sur%20le%20blog%20de%20la%20Capdata%20Tech%20Team%20%3A%20:%20https%3A%2F%2Fblog.capdata.fr%2Findex.php%2Fwp-json%2Fwp%2Fv2%2Fposts%2F632\" style=\"font-size: 0px;width:24px;height:24px;margin:0;margin-bottom:5px\"><img loading=\"lazy\" decoding=\"async\" alt=\"mail\" title=\"Share by email\" class=\"synved-share-image synved-social-image synved-social-image-share\" width=\"24\" height=\"24\" style=\"display: inline;width:24px;height:24px;margin: 0;padding: 0;border: none;box-shadow: none\" src=\"https:\/\/blog.capdata.fr\/wp-content\/plugins\/social-media-feather\/synved-social\/image\/social\/regular\/48x48\/mail.png\" \/><\/a>","protected":false},"excerpt":{"rendered":"<p>Un petit post sur un outil bien pratique pour tous ceux qui rament pour \u00e9crire des scripts sous Windows. Un des outils indispensables dont toute production doive se doter est un analyseur de journaux d&#8217;erreur. Logparser est un petit ex\u00e9cutable&hellip; <a href=\"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/\" class=\"more-link\">Continuer la lecture <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":7920,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[114,85,84],"class_list":["post-632","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-sqlserver","tag-eventlog","tag-journaux-devenements","tag-logparser"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.8 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Scruter les journaux d&#039;\u00e9v\u00e8nements Windows avec LogParser - Capdata TECH BLOG<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Scruter les journaux d&#039;\u00e9v\u00e8nements Windows avec LogParser - Capdata TECH BLOG\" \/>\n<meta property=\"og:description\" content=\"Un petit post sur un outil bien pratique pour tous ceux qui rament pour \u00e9crire des scripts sous Windows. Un des outils indispensables dont toute production doive se doter est un analyseur de journaux d&#8217;erreur. Logparser est un petit ex\u00e9cutable&hellip; Continuer la lecture &rarr;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/\" \/>\n<meta property=\"og:site_name\" content=\"Capdata TECH BLOG\" \/>\n<meta property=\"article:published_time\" content=\"2010-03-12T18:01:52+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-09-13T14:01:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blog.capdata.fr\/wp-content\/uploads\/2011\/06\/611V2LCTvL._SY355_.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"355\" \/>\n\t<meta property=\"og:image:height\" content=\"355\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"David Baffaleuf\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"David Baffaleuf\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/\"},\"author\":{\"name\":\"David Baffaleuf\",\"@id\":\"https:\/\/blog.capdata.fr\/#\/schema\/person\/136297da9f61d6e4878abe0f48bc5fbf\"},\"headline\":\"Scruter les journaux d&#8217;\u00e9v\u00e8nements Windows avec LogParser\",\"datePublished\":\"2010-03-12T18:01:52+00:00\",\"dateModified\":\"2019-09-13T14:01:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/\"},\"wordCount\":401,\"commentCount\":1,\"publisher\":{\"@id\":\"https:\/\/blog.capdata.fr\/#organization\"},\"keywords\":[\"eventlog\",\"journaux d'\u00e9v\u00e8nements\",\"logparser\"],\"articleSection\":[\"SQL Server\"],\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/\",\"url\":\"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/\",\"name\":\"Scruter les journaux d'\u00e9v\u00e8nements Windows avec LogParser - Capdata TECH BLOG\",\"isPartOf\":{\"@id\":\"https:\/\/blog.capdata.fr\/#website\"},\"datePublished\":\"2010-03-12T18:01:52+00:00\",\"dateModified\":\"2019-09-13T14:01:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/blog.capdata.fr\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Scruter les journaux d&#8217;\u00e9v\u00e8nements Windows avec LogParser\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.capdata.fr\/#website\",\"url\":\"https:\/\/blog.capdata.fr\/\",\"name\":\"Capdata TECH BLOG\",\"description\":\"Le blog technique sur les bases de donn\u00e9es de CAP DATA Consulting\",\"publisher\":{\"@id\":\"https:\/\/blog.capdata.fr\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.capdata.fr\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/blog.capdata.fr\/#organization\",\"name\":\"Capdata TECH BLOG\",\"url\":\"https:\/\/blog.capdata.fr\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/blog.capdata.fr\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/blog.capdata.fr\/wp-content\/uploads\/2023\/01\/logo_capdata.webp\",\"contentUrl\":\"https:\/\/blog.capdata.fr\/wp-content\/uploads\/2023\/01\/logo_capdata.webp\",\"width\":800,\"height\":254,\"caption\":\"Capdata TECH BLOG\"},\"image\":{\"@id\":\"https:\/\/blog.capdata.fr\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/company\/cap-data-consulting\/mycompany\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.capdata.fr\/#\/schema\/person\/136297da9f61d6e4878abe0f48bc5fbf\",\"name\":\"David Baffaleuf\",\"sameAs\":[\"http:\/\/www.capdata.fr\"],\"url\":\"https:\/\/blog.capdata.fr\/index.php\/author\/dbaffaleuf\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Scruter les journaux d'\u00e9v\u00e8nements Windows avec LogParser - Capdata TECH BLOG","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/","og_locale":"fr_FR","og_type":"article","og_title":"Scruter les journaux d'\u00e9v\u00e8nements Windows avec LogParser - Capdata TECH BLOG","og_description":"Un petit post sur un outil bien pratique pour tous ceux qui rament pour \u00e9crire des scripts sous Windows. Un des outils indispensables dont toute production doive se doter est un analyseur de journaux d&#8217;erreur. Logparser est un petit ex\u00e9cutable&hellip; Continuer la lecture &rarr;","og_url":"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/","og_site_name":"Capdata TECH BLOG","article_published_time":"2010-03-12T18:01:52+00:00","article_modified_time":"2019-09-13T14:01:00+00:00","og_image":[{"width":355,"height":355,"url":"https:\/\/blog.capdata.fr\/wp-content\/uploads\/2011\/06\/611V2LCTvL._SY355_.jpg","type":"image\/jpeg"}],"author":"David Baffaleuf","twitter_card":"summary_large_image","twitter_misc":{"\u00c9crit par":"David Baffaleuf","Dur\u00e9e de lecture estim\u00e9e":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/#article","isPartOf":{"@id":"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/"},"author":{"name":"David Baffaleuf","@id":"https:\/\/blog.capdata.fr\/#\/schema\/person\/136297da9f61d6e4878abe0f48bc5fbf"},"headline":"Scruter les journaux d&#8217;\u00e9v\u00e8nements Windows avec LogParser","datePublished":"2010-03-12T18:01:52+00:00","dateModified":"2019-09-13T14:01:00+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/"},"wordCount":401,"commentCount":1,"publisher":{"@id":"https:\/\/blog.capdata.fr\/#organization"},"keywords":["eventlog","journaux d'\u00e9v\u00e8nements","logparser"],"articleSection":["SQL Server"],"inLanguage":"fr-FR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/","url":"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/","name":"Scruter les journaux d'\u00e9v\u00e8nements Windows avec LogParser - Capdata TECH BLOG","isPartOf":{"@id":"https:\/\/blog.capdata.fr\/#website"},"datePublished":"2010-03-12T18:01:52+00:00","dateModified":"2019-09-13T14:01:00+00:00","breadcrumb":{"@id":"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/blog.capdata.fr\/index.php\/scruter-les-journaux-devenements-windows-avec-logparser\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/blog.capdata.fr\/"},{"@type":"ListItem","position":2,"name":"Scruter les journaux d&#8217;\u00e9v\u00e8nements Windows avec LogParser"}]},{"@type":"WebSite","@id":"https:\/\/blog.capdata.fr\/#website","url":"https:\/\/blog.capdata.fr\/","name":"Capdata TECH BLOG","description":"Le blog technique sur les bases de donn\u00e9es de CAP DATA Consulting","publisher":{"@id":"https:\/\/blog.capdata.fr\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.capdata.fr\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/blog.capdata.fr\/#organization","name":"Capdata TECH BLOG","url":"https:\/\/blog.capdata.fr\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/blog.capdata.fr\/#\/schema\/logo\/image\/","url":"https:\/\/blog.capdata.fr\/wp-content\/uploads\/2023\/01\/logo_capdata.webp","contentUrl":"https:\/\/blog.capdata.fr\/wp-content\/uploads\/2023\/01\/logo_capdata.webp","width":800,"height":254,"caption":"Capdata TECH BLOG"},"image":{"@id":"https:\/\/blog.capdata.fr\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/cap-data-consulting\/mycompany\/"]},{"@type":"Person","@id":"https:\/\/blog.capdata.fr\/#\/schema\/person\/136297da9f61d6e4878abe0f48bc5fbf","name":"David Baffaleuf","sameAs":["http:\/\/www.capdata.fr"],"url":"https:\/\/blog.capdata.fr\/index.php\/author\/dbaffaleuf\/"}]}},"_links":{"self":[{"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/posts\/632","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/comments?post=632"}],"version-history":[{"count":33,"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/posts\/632\/revisions"}],"predecessor-version":[{"id":4897,"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/posts\/632\/revisions\/4897"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/media\/7920"}],"wp:attachment":[{"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/media?parent=632"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/categories?post=632"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/tags?post=632"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}