Quote:

Is the file comma delilited or tab delimited?
I thought you were looking for event 560?
I think the EventID is on the sixth position.
I think splitting the lines would give a more certain result.




The file is tab delimited
I m actually looking for each ID individually. When the file size is reduced, it becomes easier to log.
Splitting the lines also didnt help.
actually the script is not able to read the input file; may be it because of UNICODE issue. (I used event viewer to generate a sample text file)