Re: Generate NT Events

Hi Pavel,

As you said, each application will have its event message file
installed and the location for that is specified in the below registry
location.

As I can see if I have SQL Server application installed on my machine
then there is an entry in the registry which specifies that the Nt
event message info is present in sqlevn70.rll file.

So, how can I retrieve values from this file?

Thanks,
Regards,
Pramod

ipramod@xxxxxxxxx wrote:
Great. Sounds good... I'll take a look...
Thanks for reply.
I'll let you know if I face any problem.

-Pramod

Pavel A. wrote:
"ipramod@xxxxxxxxx" wrote:
Hi,

I want to generate NT Events on local machine for a particular
application. For that I need to get all the NT Event error numbers and
then using that I want to generate those events and retrieve the error
descriptions for the NT Events. The error description should come from
the system as I am not aware of the error description for a particular
event number.

In short, I need to create an application which will retrieve all the
NT Event numbers for an application (say Exchange Server, SQL Server
etc.) and then generate the NT Events explicitly and retrieve the
generated error description from the system.

Is this possible?

Thanks in advance,
Regards,
Pramod

Apps register their eventlog messages by adding name of their
message resource DLLs in
HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\<category>\<appname>
The message DLLs (or other PE format files) contain a message table resource,
which had been compiled from a .mc source file.
So you can scan all these files and retrieve message numbers and strings
for all apps interesting to you.

Messages for the core OS are in few DLLs located in %systemroot%\system32:
ntdll.dll, netevent.dll, netmsg.dll, iologmsg.dll, and other *msg.dll
These DLLs always are installed and everybody can use messages contained
there.

Good luck,
--PA

.

Relevant Pages

  • "APPINIT_DLLS=" error and ".wll" error
    ... Ok first off I have no knowledge of registry problems or how to fix them. ... All the DLLs that are specified in this value are loaded by each Microsoft ... Note This feature may not be available in future versions of the Windows ... Microsoft Windows 2000 Standard Edition ...
    (microsoft.public.windowsupdate)
  • Re: ftp from Access: problems
    ... > You obviously have no idea what is meant by hardcoding, how OLE dlls ... > registered an entry in the registry points to the correct file. ... You say it's unprofessional to hard-code ...
    (comp.databases.ms-access)
  • Re: Problem installing SharePoint 2007 Enterprise
    ... SharePoint Products and Technologies Configuration Wizard ... lock to retrieve the state ... registry key from under Software\Microsoft\Shared Tools\Web Server ...
    (microsoft.public.sharepoint.windowsservices)
  • Help!: Problems with Restricted access accounts
    ... series of business object DLLs that need to be registered on each local ... Our clients have their users set up as Restricted user accounts. ... the user tries again as a restricted access user account, ... seems that the user is unable to "see" the DLL entries in the registry. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How to work around UAC?
    ... In these situations, and with UAC active, our DLLs no longer ... have access to our software's registry keys. ... your DLLs DO have access to HKLM - but read only. ...
    (microsoft.public.platformsdk.security)