Re: Generate NT Events

As you said we can not generate the events as we dont have enough
information. But if I want to generate the NT events using the
information available (Event id and error message) and use default
values (warning as its severity) then how can I generate the events?

Thanks,
PI

ipramod@xxxxxxxxx wrote:
Thanks Joe :)

Joe Richards [MVP] wrote:
Dumping the resources is fairly easy. You just have to do LoadLibrary
and LoadResource and muck around with the MESSAGE_RESOURCE_DATA
structures, it should all be out in MSDN or the PSDK. I've written tools
in the last that I sell that do dumps like that.

The one thing you can't easily do is generate the events because the
resource libraries don't have several key pieces of data such as the
severity (i.e. Type - Information, Error, Warning, etc) and the data
that gets inserted on the fly from the applications/bins that really log
the real events. You can often get what the original severity was
intended to be off the internal ID but that isn't necessarily what will
really get logged to the event log and there are legitimate reasons for
that. Say for example, an event was defined originally to be an Info but
later MSFT (or some third party who owns the app) realized that the
message should instead be a warning. Versus changing all of the internal
IDs and stuff, easier to just change the severity at the point the event
is logged unless the routine was specifically written to figure out from
the internal ID what severity should be used for logging the event.

joe

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


ipramod@xxxxxxxxx wrote:
Hi,

I want to generate NT Events on local machine for a particular
application. For that I need to get all the NT Event error numbers and
then using that I want to generate those events and retrieve the error
descriptions for the NT Events. The error description should come from
the system as I am not aware of the error description for a particular
event number.

In short, I need to create an application which will retrieve all the
NT Event numbers for an application (say Exchange Server, SQL Server
etc.) and then generate the NT Events explicitly and retrieve the
generated error description from the system.

Is this possible?

Thanks in advance,
Regards,
Pramod


.

Relevant Pages

  • Re: Generate NT Events
    ... Dumping the resources is fairly easy. ... The one thing you can't easily do is generate the events because the resource libraries don't have several key pieces of data such as the severity (i.e. ... I need to create an application which will retrieve all the ... NT Event numbers for an application (say Exchange Server, ...
    (microsoft.public.win32.programmer.kernel)
  • Re: DBI-Sybase query returning weird characters
    ... OpenClient level (i.e. FreeTDS in your case). ... and that the charset that is defined on the database server (run ... Severity: ☻ ... Toute utilisation de ce ...
    (perl.dbi.users)
  • Re: Generate NT Events
    ... I've written tools ... You can often get what the original severity was ... Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.win32.programmer.kernel)
  • Re: =?iso-8859-1?Q?Unversch=E4mte=20Memory=2DAnspr=FCche=3F?=
    ... Heute morgen ein Server mit Broadcom-Karte: ... Konsole "eingefroren". ... Severity = 1 ... Nicht im mindesten. ...
    (de.comp.sys.novell)
  • DBI-Sybase query returning weird characters
    ... use DBI; ... if ($netcool) { ... DBD::Sybase - can't get server version ... Severity: ☻ ...
    (perl.dbi.users)
Loading