Closed jpoling-dswrx closed 7 years ago
There are now two sub commands. process, and report. See EventMonkey.py -h
and EventMonkey.py process -h
. The report subcommand is so you can re-run templates without parsing again. See 'EventMonkey.py report -h'.
You would want to use EventMonkey.py process -n NAME -p Events/ -o Events/
use -f if you have custom templates, other wise it will automatically use the templates that come with it.
EventMonkey (A Windows Event Parsing Utility)
positional arguments:
{process,report} Either process or report command is required.
process Processes eventfiles and then generate reports.
report Generate reports from an existing EventMonkey
database.
Ah, but yes, the gchelpers module is now a requirement. It should be in the setup script, so a setup.py install
should grab it for you.
Great. Thanks!
# python EventMonkey.py -f xlsx_templates/ -p Events/ -o Events/
Are the gchelpers modules now a requirement for this?