Query "application and services logs" with log parser

Hello,
I have a script which collects printing logs from print server using logparser. We have moved our print server to Window 2008 R2. The problem is, I was querying printing logs from System logs (select ... from \\printserver\system), but on 2008 R2, these logs are under "application and services logs\Microsoft\Windows\PrintService\Operational". What must I use at the end of the query (select ..... \\printserver\????) ?
TAI-Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Steven CarnahanNetwork ManagerCommented:
Are you using WMIC to query the log files?

WMIC NTEVENT where "LogFile='application and services' and Type>'0'"

Adjust for what you are looking for.
0
TAI-Author Commented:
Hello, I am using "log parser", not WMIC.
0
Steven CarnahanNetwork ManagerCommented:
It appears that either someone else is asking for the same information or this is also you on http://forums.iis.net/1140.aspx (the logparser forum) There is no answer as of yet.
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

TAI-Author Commented:
Yes, this is my post too.Waiting for someone to help.
0
Steven CarnahanNetwork ManagerCommented:
Let me see what I can find.  I haven't used log parser before. WMIC is pretty simple to use though.
0
TAI-Author Commented:
Ok, I have found it. Logparser checks "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog" for event logs. When I created a key named "Microsoft-Windows-PrintService/Operational", I have succesfully reached this log.

I have created this key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Microsoft-Windows-PrintService/Operational
1

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Steven CarnahanNetwork ManagerCommented:
Glad you were able to discover a solution.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.