3.6  Translation

You can translate, or decompose, the events in a binary event log into a readable format using the translate command. Translation operates in manual mode, meaning you must enter the command every time you want to perform translation.

For more information about translation and its default settings, refer to Chapter 5.

To manually translate binary event logs using the new common syntax, use the following command format:

wsea tra [input inputfile] [out | outhtml outputfile] [filterstatement] [brief | full]

For information on performing translation with another syntax, refer to Appendix E.

Input Files

By default, translation processes the system event log. If you want to process a different binary log file, you must use the input keyword and specify the input file. Refer to Section 3.9.1 for more information on input files

Output Files

By default, output from translation is displayed on the screen. To save output to a file, use either the out or the outhtml keyword and provide a file name. Refer to Section 3.9.2 for more information on output files.

Filtering Log Files

You can specify the events from a binary event log file that you want to translate by defining a filter. For more information on filtering refer to Section 3.9.3.

Report Type

You can specify either brief or full output for translation. Refer to Section 5.2.3 for more information on the report types.

Translation Output

Chapter 5 describes the results of translation. Refer to Appendix A for an example of a translated event and to see the difference between full and brief output.