Solved

Windows 2000 Event Log file structure

Posted on 2001-08-08
1
178 Views
Last Modified: 2013-12-28
Any one know where can i get the Windows 2000 Event Log file structure so that i can write a simple program to read the *.evt files?

Or any recommended tools instead of built-in-dummy Event Viewer?
0
Comment
Question by:chnelson
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 10

Accepted Solution

by:
Longbow earned 100 total points
ID: 6363609
Hi chnelson,

Already have a job wich does the job.
Put next text to a .vbs file.
It will run if VBScript Engine 5.x (or MSIE5)
 is installed.

You will find stmadmin.dll here :
http://cwashington.netreach.net/main_site/downloads/default.asp?topic=n-z

'Beginning of .vbs file
'Check EventLog and show each record to the screen
'It only work on a local workstation. Better to come later...
'This will work if ie 5.01 is installed and admin.dll
'   registered (VBScript and WSH are needed)
'Type "regsvr32 c:\winnt\system32\stmadmin.dll" in a DOS window

Set EventLog = CreateObject("STMAdmin.EventLog")
EventLog.Open("System")               'System or Application or Security

EventLog.ReportEvent "xxx", 123, "yyy"

List = List & "Number of Records: " & EventLog.NoRecords & VbCrLf
Wscript.Echo List

For Each rec In EventLog.Records(8)
     List = ""                    'Empty previous record
     PrintRecord(rec)
Next

Sub PrintRecord(rec)
     List = List & "EventID: " & rec.EventID & VbCrLf
     List = List & "Source Author: " & rec.SourceName & VbCrLf
     List = List & "Computer Author: " & rec.ComputerName & VbCrLf
     List = List & "Event String: " & rec.Event & VbCrLf
     
     List = List & "Strings: " & VbCrLf
     For Each str In rec.Strings
          List2 = List & " " & str & VbCrLf & VbCrLf
Wscript.Echo List2
     Next
End Sub
'End of .vbs file

0

Featured Post

Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

If you need to start windows update installation remotely or as a scheduled task you will find this very helpful.
An article on effective troubleshooting
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question