Solved

Query "application and services logs" with log parser

Posted on 2010-08-19
7
2,586 Views
Last Modified: 2012-05-10
Hello,
I have a script which collects printing logs from print server using logparser. We have moved our print server to Window 2008 R2. The problem is, I was querying printing logs from System logs (select ... from \\printserver\system), but on 2008 R2, these logs are under "application and services logs\Microsoft\Windows\PrintService\Operational". What must I use at the end of the query (select ..... \\printserver\????) ?
0
Comment
Question by:TAI-
  • 4
  • 3
7 Comments
 
LVL 26

Expert Comment

by:pony10us
ID: 33476848
Are you using WMIC to query the log files?

WMIC NTEVENT where "LogFile='application and services' and Type>'0'"

Adjust for what you are looking for.
0
 

Author Comment

by:TAI-
ID: 33482228
Hello, I am using "log parser", not WMIC.
0
 
LVL 26

Expert Comment

by:pony10us
ID: 33485969
It appears that either someone else is asking for the same information or this is also you on http://forums.iis.net/1140.aspx (the logparser forum) There is no answer as of yet.
0
3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

 

Author Comment

by:TAI-
ID: 33498229
Yes, this is my post too.Waiting for someone to help.
0
 
LVL 26

Expert Comment

by:pony10us
ID: 33501736
Let me see what I can find.  I haven't used log parser before. WMIC is pretty simple to use though.
0
 

Accepted Solution

by:
TAI- earned 0 total points
ID: 33509593
Ok, I have found it. Logparser checks "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog" for event logs. When I created a key named "Microsoft-Windows-PrintService/Operational", I have succesfully reached this log.

I have created this key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Microsoft-Windows-PrintService/Operational
0
 
LVL 26

Expert Comment

by:pony10us
ID: 33511284
Glad you were able to discover a solution.
0

Featured Post

Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

896 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now