[hobbit] Windows logs.
Gerard Lill
Gerard at ets.biz
Wed Nov 23 10:32:55 CET 2005
Folks,
Attached is two files - one for parsing through a directory looking for
Log files and returning key pieces of information; the other for
searching the windows Event Log using WMI.
The Event Log parser will only work on Windows 2003 server I believe.
The support folder of a Windows 2000 server probably contains a command
line driven applet for interrogating the event log.
Hope this helps.
-Gerard
-----Original Message-----
From: ZanDAhaR [mailto:allan at zandahar.net]
Sent: Tuesday, 22 November 2005 22:21
To: hobbit at hswn.dk
Subject: Re: [hobbit] Windows logs.
Thomas wrote:
> Yes this is what I ended up doing. I noticed that if I do a dir /X
> then the 8.3 format is shown, but then I ran into the next problem and
> this is wildcard filnames ie. syslog*.log as the logs are named with
> the date in the filename. This require a total rewrite of the
> bb-msgs.pl script as far as I could see.
>
> So I told the managers that this was not possible given the timeframe
> on a windows box. :-( no happy about it.
>
> Thanks for replying.
>
> /Thomas
>
> ZanDAhaR wrote:
>
>> Thomas wrote:
>>
>>> Hi !
>>> Any of you had to monitor logs on a windows box where the file is
>>> located in a directory with spaces in ?
>>>
>>> bb-msgs.pl version 1.1 breaks if I try.
>>>
>>> /Thomas
>>>
>>>
>>> To unsubscribe from the hobbit list, send an e-mail to
>>> hobbit-unsubscribe at hswn.dk
>>>
>>>
>> Have you tried taking out the space ? Convert the folder to dos 8.3
>> format so for eg Program Files ends up being progra~1 Everything
>> gets truncated to 6 chars + ~1. I know its Perl and not dos but it
>> cant hurt to try :)
>>
>> Allan
>>
>> To unsubscribe from the hobbit list, send an e-mail to
>> hobbit-unsubscribe at hswn.dk
>>
>>
>
>
> To unsubscribe from the hobbit list, send an e-mail to
> hobbit-unsubscribe at hswn.dk
>
>
I'm sure someone else could help you out with the perl expression but I
think maybe it should be %syslog* or something. I'm not a perl junkie so
dont take my word as gospel :)
HTH
Allan
To unsubscribe from the hobbit list, send an e-mail to
hobbit-unsubscribe at hswn.dk
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: EventLog.txt
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20051123/6b1b63af/attachment.txt>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: DirectoryParse.txt
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20051123/6b1b63af/attachment-0001.txt>
More information about the Xymon
mailing list