I just came to recommend the same.
:)-------------------------------------------Original Message:Sent: Jan
26, 2022 09:42 AMFrom: Ken MickelettoSubject: How to avoid parsing
fields = '0'?Hi Tony,The best way to handle this is to capture the field
int...
Tony, This is a bit tough when the vendor's log is putting two different
types of data into the same field. What you have to determine first is
whether or not there is always something in that field that could help
you identify it as one or the other...
Tony, This is a bit tough when the vendor's log is putting two different
types of data into the same field. What you have to determine first is
whether or not there is always something in that field that could help
you identify it as one or the other...
Tony,The Events you list above 722011, 722028, and 313005 would not
match the sample you posted, which is event ID 111009. For each of those
event types listed, you would need to find the relevant block, for
example, look for a when block that starts...
