Re: Auto Event Log monitoring

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hi,

Set an eventtrigger up to call a simple script that then calls a vbs script.

In the vbs script use WMI to interogate the event log and pull the exact
detail you want. Use the script to format the information and send it to a
nominated admin account using blat.

This way you can keep the eventtrigger very simple (and therefore no hassle
if its lost) and keep all the logic in your script (which i am sure you'll
save somewhere safe).

Rgds,

G.
--
A Sys Admin is me!


"JayKon" wrote:

Snare? http://sourceforge.net/projects/snare/ Log to file or to the Snare
Backlog then read the file,

Looks right, unfortunatly, I'm prevented from installing new software :( I
can only write simple scripts. Ain't contracting fun?


"JayKon" <JayKon@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6E803EBE-48DD-49DE-A516-46D704D90749@xxxxxxxxxxxxxxxx
I've been monitoring c:\Windows\system32\config\AppEvent.evt to see when a
particular event occurs, however, I noticed that the time stamp on the
file
tends to be several hours old (when I can see entries after that in the
Event
Viewer).

What this means to me is that I can't write a program that reads this file
to create a simple notification - which is a bummer.

Anyone know what I can do to resolve this? I need access to the current
event log data from outside the Event Viewer.




.

Relevant Pages

  • Windows 2003 VB Script Follow-Up Question
    ... I slipped in Security to the privilege ... I understand that the first line of the script ... >> clear their Security Event Log. ...
    (microsoft.public.scripting.vbscript)
  • Re: Logon Script
    ... The script writes to a share that only administrators have access to ... The domain controller event log is ... the logon type would be a bear. ... I know how to verify in the event log based ...
    (microsoft.public.scripting.vbscript)
  • Re: Script just stops running even though on error resume next
    ... It writes properly to the event log before the ... bind, but never gets to write to the event log after the bind. ... You recommended using the LDAP provider - I will update my script and post ... I have an example VBScript logon script that uses ADSystemInfo and maps ...
    (microsoft.public.scripting.vbscript)
  • Re: Flexibility of Eventriggers in Win2003 - query on source + wil
    ... I created a very broad event trigger that looks only at entries of /EID "3" ... The event trigger runs a batch file that then calls a vbs script that uses ... WMI to interogate the event log directly pulling out the last few entries. ... Namely to tweak it so that it will check to see if it has sent the admin ...
    (microsoft.public.windows.server.general)
  • Re: WSS V3 Question
    ... I will look into the script file for backups. ... to identify WSS event log errors that you can monitor? ... I'm not familiar with the V# backup tool, but if you want a really good ...
    (microsoft.public.windows.server.sbs)