The log parsing job will fail unless it has the correct header format. Could you post a copy of the log header?
Required columns: "matd_server" "matd_taskid" "matd_hash" "filename""matd_background_scan"
Optional column: "matd_severity"
thank you for your answer.
but it still fails.
Log header : time_stamp "auth_user" "src_ip" "url" "matd_severity" "matd_server" "matd_taskid" "matd_hash" "filename""matd_background_scan"
Thanks.Message was edited by: wybae on 6/17/14 11:46:07 PM CDT
Since the job is failing, CSR is complaining about the header. It will fail the job unless it can parse the header.
So, if I look at what you copied and pasted, I see a missing space between "filename""matd_background_scan"
I don't see anything else wrong. The space is used as a field delimiter.
Also make sure the log lines match the header with all the correct spaces and quotes. CSR will build a regex pattern for the log lines based on the header. If they don't match, the file won't parse correctly.