Hi all,
I am trying to export windows events to SQL server using logparser, got this far and this error. Appreciate some information.
Do I need to create table with exact columns first? I though -createtable:ON will do this for me..
thanks
+++++++++++++++++++++++++++
C:\Program Files (x86)\Log Parser 2.2>logparser "SELECT * INTO XYZ.sql FROM 'C:\sysmon\sysmon\ForwardedEvents.evtx'" -
i:evt -o:sql -server:localhost -database:xyz-sysmon-db -username:admin -password:XXXXX -createTable: ON
Task aborted.
Error creating table
SQL State: 42000
Native Error: 2760
Error Message: [Microsoft][ODBC SQL Server Driver][SQL Server]The specified
schema name "XYZ" either does not exist or you do not have permission to
use it.
Most likely you're attempting to create a table with invalid column names,
such as names containing the '-' character, or names that are illegal for
the database you are connecting to (e.g. 'timestamp'). Rename the columns
in the SELECT clause using the AS statement.
Statistics:
-----------
Elements processed: 0
Elements output: 0
Execution time: 0.91 seconds