Can you tell me the format for #split for from and to?

[harryray2]

I've just re-visited the journal log format...split looks interesting.
Can you tell me the format for #split for from and to? ie. copy from to, move from to etc.

Currently I'm using: journal_log_format=#date:<DD-MM-YYYY hh:mm:ss> #action:<-6> "#filename:"

Update:
Is this correct?
journal_log_format=#date:<DD-MM-YYYY hh:mm:ss> #action:<-6> #split: "#filename:"

[dave]

I tried the format (the one with #split: in it) in your post, it seems to work fine for me.
I guess you can just try it to see if it's correct or not?

[void]

Use #split: early in your format.

It is replaced with nothing and will flag Everything to log renames/moves as two lines.
One line for the old filename and one line for the new filename.

[harryray2]

Thanks, it appears to work when moving a file, but when copying there is just one entry that says create. Also when pasting, it just says create.

[void]

A single line is expected for copying.
The action will be create.

Only rename and move actions (on the local volume) will be split over two lines.

[harryray2]

Thanks, I realised when I looked at the Index Journal.

Any chance of changing that in the future so that copy (and paste) is shown in the logs and the Index Journal, rather than just create?

[void]

Everything cannot detect the "create" as a "copy"

The copy is seen as a newly created file to the USN Journal and Everything.

[harryray2]

OK, thanks....