Reading Event Logs in Win2008
Reading Event Logs in Win2008
(OP)
I've been successfully using a home-grown event viewer that used where $event_group was one of the basic "Application", "System", or "Security".
One of the routines looked for print jobs to help me keep track of the heaviest users. Either they got first dibs on printer maintenance or see if I could find a way to curtail their printing .. anyway, I now have a Win2008 server - of which MS kindly decided to move the location of where print events are saved. I can find them under the event viewer gui, but not sure how to translate that into it's like name thru Win32::EventLog
I've found some info on EventForwarding which I'd rather avoid if I could. From one perspective, this will only add a level of complexity to something I have that already works (mostly works).
CODE
$handle=Win32::EventLog->new($event_group, $server_name) ;
One of the routines looked for print jobs to help me keep track of the heaviest users. Either they got first dibs on printer maintenance or see if I could find a way to curtail their printing .. anyway, I now have a Win2008 server - of which MS kindly decided to move the location of where print events are saved. I can find them under the event viewer gui, but not sure how to translate that into it's like name thru Win32::EventLog
I've found some info on EventForwarding which I'd rather avoid if I could. From one perspective, this will only add a level of complexity to something I have that already works (mostly works).
RE: Reading Event Logs in Win2008
The 'get-winevent' and 'get-eventlog' are the two main commands of note here
CODE --> powershell