Solved

Query "application and services logs" with log parser

Posted on 2010-08-19
7
2,560 Views
Last Modified: 2012-05-10
Hello,
I have a script which collects printing logs from print server using logparser. We have moved our print server to Window 2008 R2. The problem is, I was querying printing logs from System logs (select ... from \\printserver\system), but on 2008 R2, these logs are under "application and services logs\Microsoft\Windows\PrintService\Operational". What must I use at the end of the query (select ..... \\printserver\????) ?
0
Comment
Question by:TAI-
  • 4
  • 3
7 Comments
 
LVL 26

Expert Comment

by:pony10us
ID: 33476848
Are you using WMIC to query the log files?

WMIC NTEVENT where "LogFile='application and services' and Type>'0'"

Adjust for what you are looking for.
0
 

Author Comment

by:TAI-
ID: 33482228
Hello, I am using "log parser", not WMIC.
0
 
LVL 26

Expert Comment

by:pony10us
ID: 33485969
It appears that either someone else is asking for the same information or this is also you on http://forums.iis.net/1140.aspx (the logparser forum) There is no answer as of yet.
0
Do email signature updates give you a headache?

Do you feel like all of your time is spent managing email signatures? Too busy to visit every user’s desk to make updates? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today!

 

Author Comment

by:TAI-
ID: 33498229
Yes, this is my post too.Waiting for someone to help.
0
 
LVL 26

Expert Comment

by:pony10us
ID: 33501736
Let me see what I can find.  I haven't used log parser before. WMIC is pretty simple to use though.
0
 

Accepted Solution

by:
TAI- earned 0 total points
ID: 33509593
Ok, I have found it. Logparser checks "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog" for event logs. When I created a key named "Microsoft-Windows-PrintService/Operational", I have succesfully reached this log.

I have created this key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Microsoft-Windows-PrintService/Operational
0
 
LVL 26

Expert Comment

by:pony10us
ID: 33511284
Glad you were able to discover a solution.
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
If like me you are one who spends a lot of time working and scripting with cmd.exe, sometimes it is handy to be able to quickly view a calendar for a given month and year. This script will quickly do just that!  Save the code posted below to a .bat …
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now