Re: Generate NT Events

Great. Sounds good... I'll take a look...
Thanks for reply.
I'll let you know if I face any problem.

-Pramod

Pavel A. wrote:
"ipramod@xxxxxxxxx" wrote:
Hi,

I want to generate NT Events on local machine for a particular
application. For that I need to get all the NT Event error numbers and
then using that I want to generate those events and retrieve the error
descriptions for the NT Events. The error description should come from
the system as I am not aware of the error description for a particular
event number.

In short, I need to create an application which will retrieve all the
NT Event numbers for an application (say Exchange Server, SQL Server
etc.) and then generate the NT Events explicitly and retrieve the
generated error description from the system.

Is this possible?

Thanks in advance,
Regards,
Pramod

Apps register their eventlog messages by adding name of their
message resource DLLs in
HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\<category>\<appname>
The message DLLs (or other PE format files) contain a message table resource,
which had been compiled from a .mc source file.
So you can scan all these files and retrieve message numbers and strings
for all apps interesting to you.

Messages for the core OS are in few DLLs located in %systemroot%\system32:
ntdll.dll, netevent.dll, netmsg.dll, iologmsg.dll, and other *msg.dll
These DLLs always are installed and everybody can use messages contained
there.

Good luck,
--PA

.

Relevant Pages

  • Re: Generate NT Events
    ... installed and the location for that is specified in the below registry ... then there is an entry in the registry which specifies that the Nt ... how can I retrieve values from this file? ... The message DLLs contain a message table resource, ...
    (microsoft.public.win32.programmer.kernel)
  • Re: Generate NT Events
    ... It will open in resource editor. ... Now goes the hard part - retrieve event codes and messages. ... Maybe some 3rd party resource editor can decode it automatically... ... The message DLLs contain a message table resource, ...
    (microsoft.public.win32.programmer.kernel)
  • Version information from EXEs, DLLs, etc?
    ... Is there a nice set of .NET functions built into the framework to retrieve ... file version information embedded in EXEs, DLLs, etc? ... strings such as Company, File Version, Copyright, Product Name, and so ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Exporting/importing a variable from a Dll
    ... we can export it and retrieve through pointer to a class and use the method ... > usually poor practice in ordinary programming, more so with DLLs. ...
    (microsoft.public.vc.mfc)
Loading