in reply to Re^4: Extracting useful information from Windows Event Logs
in thread Extracting useful information from Windows Event Logs
I don't understand what you mean. But (?=owned by ) does not capture, and why are you interested in pos anyway? Wild guess: don't you want (?<=owned by ) maybe?
|
|---|