?
Solved

Windows 2000 Event Log file structure

Posted on 2001-08-08
1
Medium Priority
?
181 Views
Last Modified: 2013-12-28
Any one know where can i get the Windows 2000 Event Log file structure so that i can write a simple program to read the *.evt files?

Or any recommended tools instead of built-in-dummy Event Viewer?
0
Comment
Question by:chnelson
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 10

Accepted Solution

by:
Longbow earned 400 total points
ID: 6363609
Hi chnelson,

Already have a job wich does the job.
Put next text to a .vbs file.
It will run if VBScript Engine 5.x (or MSIE5)
 is installed.

You will find stmadmin.dll here :
http://cwashington.netreach.net/main_site/downloads/default.asp?topic=n-z

'Beginning of .vbs file
'Check EventLog and show each record to the screen
'It only work on a local workstation. Better to come later...
'This will work if ie 5.01 is installed and admin.dll
'   registered (VBScript and WSH are needed)
'Type "regsvr32 c:\winnt\system32\stmadmin.dll" in a DOS window

Set EventLog = CreateObject("STMAdmin.EventLog")
EventLog.Open("System")               'System or Application or Security

EventLog.ReportEvent "xxx", 123, "yyy"

List = List & "Number of Records: " & EventLog.NoRecords & VbCrLf
Wscript.Echo List

For Each rec In EventLog.Records(8)
     List = ""                    'Empty previous record
     PrintRecord(rec)
Next

Sub PrintRecord(rec)
     List = List & "EventID: " & rec.EventID & VbCrLf
     List = List & "Source Author: " & rec.SourceName & VbCrLf
     List = List & "Computer Author: " & rec.ComputerName & VbCrLf
     List = List & "Event String: " & rec.Event & VbCrLf
     
     List = List & "Strings: " & VbCrLf
     For Each str In rec.Strings
          List2 = List & " " & str & VbCrLf & VbCrLf
Wscript.Echo List2
     Next
End Sub
'End of .vbs file

0

Featured Post

Building an interactive eFuture classroom

Watch and learn how ATEN provided a total control system solution including seamless switching matrix switch, HDBaseT extenders, PDU, lighting control to build an interactive eFuture classroom.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article summaries thoughts and ideas from two years of sustained use. It provides good reasoning to make the jump to Windows 10.
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

801 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question