Event Viewer Parser

Hello EE,
Ive looked around the net for a good tool to parse logs from the windows event viewer. I found a good one called Event Log View that does what I want...I just would like a free utility for this if there is one that is comparable. I work for a non-profit agency, so dont think Im just being cheap...its for good reason that I use free tools. If anyone out there knows of a tool that will allow me to view, filter, report and manage the event logs on my servers, and that is free, or very reasonablely priced...please let me know.

Thanks
Joe
LVL 1
JoeDWAsked:
Who is Participating?
 
grayeCommented:
If you're interested in collecting more than just the event logs, I've got a free program that will collect 182 pieces of information from each server (including the event log, obviously) and store it in a central database.   We run it as a scheduled task, so that it keep the database up-to-date.  That way you can create custom queries to search for whatever you like.

The program is called SOSOS, and will collect all sorts of things like, installed software, BIOS rev levels, Microsoft update patches, CPU, disk space, etc, etc, etc.

My FTP server is down for a while (usually it'd be available via ftp://ftp.dpw.hood.army.mil), but I also maintain it at http://www.planet-source-code.com/vb/scripts/ShowCode.asp?txtCodeId=364&lngWId=10 (in VB.Net source code format only... no executable, sorry)
0
 
ewtaylorCommented:
Well you could save as a comma delimited and import it into excel.
0
 
JoeDWAuthor Commented:
Yes, but the whole idea for such a tool is to minimize the manual part of looking through the event viewer for issues and such. We have about 20 servers here...and every day the logs get cleared out by me. A tool to let me parse them and check whats going on from my workstation would be very helpful and less time consuming.

Thanks again
0
Cloud Class® Course: SQL Server Core 2016

This course will introduce you to SQL Server Core 2016, as well as teach you about SSMS, data tools, installation, server configuration, using Management Studio, and writing and executing queries.

 
sr75Commented:
why not your machine's event viewer?  It allows for what you want to do.

Action - Open Log file should allow you to view it and then Filter it so that you can see the errors and such that you want to see.
0
 
oBdACommented:
Maybe I'm stating the obvious here, but it might be that you just missed out on this. The cheapest and easiest solution comes with your OS: You can simply create a dedicated MMC that has the event logs of all your servers available without you having manually to connect to everyone.
From the "run" menu on your workstation, start "MMC".
In the "Console" menu, choose "Add/Delete Snap-in",
Click the "Add" button, choose "Event Viewer". In the next window, enter the name of the server. Repeat until you have listed all your servers.
From the Console menu, save the new console someplace and create a shortcut to it.
When you do a right-click on the logs, you have a filtering and a search function as well.

Depending on what you want to do, you could check out logparser, a free tool from Microsoft that lets you run queries against an event log.
Log Parser
http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=8cde4028-e247-45be-bab9-ac851fc166a4
0
 
JoeDWAuthor Commented:
Sorry if Im not being clear enough, and thanks for the comments they are most helpful... I understand that the event viewer on the OS is the best way, but going to 20 different servers, reading through and clearing the logs is a time consuming task...I want a simple app that lets me do this from the workstation im at...i know MMC does this but I also need filtering and rules...the app I mentioned above is about the closest thing I can think of and the cheapest too. Unless anyone knows of an app that does this for a cheaper price? and Graye....I will check out your code and let you know...thanks
0
 
ewtaylorCommented:
Ok how about just writing a small batch file that uses the dumpel command http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/dumpel-o.asp
or even the elogdmp command
http://www.tburke.net/info/reskittools/topics/elogdmp.htm
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.