Logparser request for cookie value

Question

I have abc=1234added a cookie.

It appears in the IIS log. But in the cs(Cookie) field , other cookies are displayed, also separated by a semicolon.

I want to use logparseruntil get cookie value abc.

Can you offer a request?

eg. if cs (Cookie) matters +pqr=999;+abc=1234;+xyz=222, the logparser request should return 1234.

+5

Souvik basu Sep 03 '12 at 11:05

1 answer

Souvik basu · Answer 1 · 2012-09-03T13:04:13+0000

Found. Use the extract_value () function

logparser "SELECT extract_value(cs(Cookie),'+abc',';') as abc_value from ..."