Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 692
  • Last Modified:

Event Viewer tool

Hello ,

I need a Microsoft tool to extract the Event log contents .. I need to filter the object type from the description of the Success audits for DNS audits.

Looking a tool from Microsoft .
0
Premkumar Yogeswaran
Asked:
Premkumar Yogeswaran
3 Solutions
 
KorbusCommented:
Just right click the log, and save it.  
Or do you mean that you need this done programatically?
0
 
Premkumar YogeswaranAnalyst II - System AdministratorAuthor Commented:
Yes saving does not give me the Description in Windows 2003 R2
0
 
ComputerTechieCommented:
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
65tdCommented:
Microsoft also has an intersting tool called LogPaser that meet your needs.
http://www.microsoft.com/en-ca/download/details.aspx?id=24659
0
 
jeorgeCommented:
Hi Microsoft has the event tool by the name of Event viewer.

http://technet.microsoft.com/en-us/library/cc722404.aspx

http://support.microsoft.com/kb/308427

http://support.microsoft.com/kb/308427

You can search the tool on google. Once the tool is downloaded you can typr in at the run command-> eventvwr and the tool will be ready to use.

Since you are going to use Microsoft event viewer tool i would love to tell you some drawbacks that microsoft tool have.

You cannot scheulede reports from the native MIcrosoft event viewer.
You cannot create alerts , complaince reports etc. from the microsoft tool.

For instance, Hippa , SOX, PCI are the  most common used today for daily transcation. Microsoft event viewer tool generally overwrite the all the log one after the other which in turns face little difficulty while complaincing the report.

Few years back i too have to use this and i tried Microsoft tool but since these problem i faced i switched to a another third party tool.

You too can test out the tool and if you face the same as I, I can recommend you the tool i tested after this.

Update back to the community for the same.
0
 
PakaCommented:
The native event viewer should work for this.  I ran a test on one of my W2003R2 servers and it does export the Description field:

1/23/2013      10:24:57 PM      MsiInstaller      Information      None      11707      ROUTER-01\Administrator      ROUTER-01      Product: Microsoft Network Monitor: NetworkMonitor Parsers 3.4 -- Installation completed successfully.

To export:
Right-click the log you want to export
Select Save Log File as...
Type a file name
Select either Tab or CSV format as the type

Description will be the 9th column.

Here's an example of of one of my DNS logs exported:
5/31/2012      9:08:55 PM      DNS      Warning      None      4521      N/A      PT-E2A636BDEDE9      The DNS server encountered error 32 attempting to load zone 1.1.30.in-addr.arpa from Active Directory. The DNS server will attempt to load this zone again on the next timeout cycle. This can be caused by high Active Directory load and may be a transient condition.
0

Featured Post

Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  

Tackle projects and never again get stuck behind a technical roadblock.
Join Now