Link to home
Create AccountLog in
Avatar of LaurelIT
LaurelITFlag for Afghanistan

asked on

How do I pass an event id from the Windows 2008 system log to a script or email when using task scheduler?

I have a few tasks that fire off generic emails when certain events are logged in the system log of our Win2008 domain controller.  I am wondering if I can pass off variables in these events to the script/email?  For example, if an account becomes locked out, it would be useful to know who was locked out...and if it was initiated from an internal machine or the Citrix/web environment etc.

Is this even possible?
ASKER CERTIFIED SOLUTION
Avatar of Jamie McKillop
Jamie McKillop
Flag of Canada image

Link to home
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
See answer
Avatar of LaurelIT

ASKER

As per usual, the solution should have been smacking me right in the face.  I created a PowerShell script that gets called on the event trigger, parses the information and sends me what I want to see.  Brilliant.  Thank You.