Re: Generate NT Events
- From: ipramod@xxxxxxxxx
- Date: 29 Jan 2007 04:24:25 -0800
Thanks Joe, I got that earlier...
now i am able to generate events successfully.
On Jan 29, 5:43 am, "Joe Richards [MVP]" <humorexpr...@xxxxxxxxxxx>
wrote:
Check out the ReportEvent API call.
--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Editionwww.joeware.net
---O'Reilly Active Directory Third Edition now available---
http://www.joeware.net/win/ad3e.htm
ipra...@xxxxxxxxx wrote:
As you said we can not generate the events as we dont have enough
information. But if I want to generate the NT events using the
information available (Event id and error message) and use default
values (warning as its severity) then how can I generate the events?
Thanks,
PI
ipra...@xxxxxxxxx wrote:
Thanks Joe :)
Joe Richards [MVP] wrote:
Dumping the resources is fairly easy. You just have to do LoadLibrary
and LoadResource and muck around with the MESSAGE_RESOURCE_DATA
structures, it should all be out in MSDN or the PSDK. I've written tools
in the last that I sell that do dumps like that.
The one thing you can't easily do is generate the events because the
resource libraries don't have several key pieces of data such as the
severity (i.e. Type - Information, Error, Warning, etc) and the data
that gets inserted on the fly from the applications/bins that really log
the real events. You can often get what the original severity was
intended to be off the internal ID but that isn't necessarily what will
really get logged to the event log and there are legitimate reasons for
that. Say for example, an event was defined originally to be an Info but
later MSFT (or some third party who owns the app) realized that the
message should instead be a warning. Versus changing all of the internal
IDs and stuff, easier to just change the severity at the point the event
is logged unless the routine was specifically written to figure out from
the internal ID what severity should be used for logging the event.
joe
--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net
---O'Reilly Active Directory Third Edition now available---
http://www.joeware.net/win/ad3e.htm
ipra...@xxxxxxxxx wrote:
Hi,
I want to generate NT Events on local machine for a particular
application. For that I need to get all the NT Event error numbers and
then using that I want to generate those events and retrieve the error
descriptions for the NT Events. The error description should come from
the system as I am not aware of the error description for a particular
event number.
In short, I need to create an application which will retrieve all the
NT Event numbers for an application (say Exchange Server, SQL Server
etc.) and then generate the NT Events explicitly and retrieve the
generated error description from the system.
Is this possible?
Thanks in advance,
Regards,
Pramod- Hide quoted text -- Show quoted text -
.
- References:
- Re: Generate NT Events
- From: Joe Richards [MVP]
- Re: Generate NT Events
- From: ipramod
- Re: Generate NT Events
- From: ipramod
- Re: Generate NT Events
- From: Joe Richards [MVP]
- Re: Generate NT Events
- Prev by Date: RE: Overlapped IO with error 0x800705AD
- Next by Date: Re: Access denied when trying to move directory in use
- Previous by thread: Re: Generate NT Events
- Next by thread: RE: SetWinEventHook, minimizing the impact on the system
- Index(es):
Relevant Pages
|
