topic Re: Write to EventLog (lotsof points !!!) in Operating System - Microsoft

Write to EventLog (lotsof points !!!)

Georg Tresselt — Thu, 23 Dec 2004 04:50:57 GMT

Hello experts,

I'm working on script which I want to write a message to the Windows EventLog when it runs into a serious error. Is there any utility to do that, maybe in the resource kit ? Or is there a way to do it in perl. The Win32::EventLog only allows to read the Log.

Merry Xmas

Re: Write to EventLog (lotsof points !!!)

Gary Cooper_1 — Thu, 23 Dec 2004 04:59:56 GMT

Hi Georg,

Check out:
http://support.microsoft.com/?kbid=154576
http://www.windowsitpro.com/WindowsScripting/Article/ArticleID/16404/16404.html

Regards,

Gary

Re: Write to EventLog (lotsof points !!!)

Georg Tresselt — Thu, 23 Dec 2004 05:10:41 GMT

Isn't there something similar to the logger command on UNIX ? Thought I had seen something like that in the past.

Re: Write to EventLog (lotsof points !!!)

Gary Cooper_1 — Thu, 23 Dec 2004 05:15:57 GMT

Hi Georg,

How about http://support.microsoft.com/default.aspx?scid=kb;en-us;315410

Cheers,

Gary

Re: Write to EventLog (lotsof points !!!)

Georg Tresselt — Thu, 23 Dec 2004 06:36:17 GMT

Regarding perl, as I said already Win32::EventLog doesn't write to the EventLog. But could there be a way to do it with Win32::OLE ???

Re: Write to EventLog (lotsof points !!!)

Ganesh Babu — Thu, 23 Dec 2004 10:31:33 GMT

u wanna try this code??

http://www.windowsitpro.com/WindowsScripting/Article/ArticleID/16404/16404.html

Ganesh

Re: Write to EventLog (lotsof points !!!)

Georg Tresselt — Thu, 23 Dec 2004 11:02:23 GMT

Thanks Ganesh,

But if you look closely you'll see that Gary had posted that one already. Maybe, I read it a bit in a hurry, but I don't see how I could write directly with Perl to the Windows EventLog.

I've now implemented a system call to logevent, works fine.

Cheers
Georg

Re: Write to EventLog (lotsof points !!!)

Ganesh Babu — Thu, 23 Dec 2004 12:13:56 GMT

This is the code Gary has written in the query.pl file he had in the zip file..

use vars qw( %Log );
use strict;
use Win32::EventLog;

my %EVENT_TYPES = (
error => EVENTLOG_ERROR_TYPE,
warning => EVENTLOG_WARNING_TYPE,
info => EVENTLOG_INFORMATION_TYPE,
success => EVENTLOG_AUDIT_SUCCESS,
failure => EVENTLOG_AUDIT_FAILURE
);

foreach my $Key ( qw( Computer
Source
EventType
EventID ) )
{
$Log{$Key} = shift @ARGV;
}
$Log{Strings} = join( "\0", @ARGV );
if( my $Event = Win32::EventLog->new( $Log{Source}, $Log{Computer} ) )
{
$Log{EventType} = $EVENT_TYPES{$Log{EventType}};
if( $Event->Report( \%Log ) )
{
print "Log was successfully sent.\n";
}
else
{
print "Unable to submit log.\n";
}
$Event->Close();
}
else
{
print "Unable to connect to $Log{Computer}.\n";
}

Ganesh

Re: Write to EventLog (lotsof points !!!)

lowster — Thu, 06 Jan 2005 02:53:01 GMT

\\computername-s severity-c categorynumber-r source-e eventID-t timeout"event text"

Re: Write to EventLog (lotsof points !!!)

Georg Tresselt — Wed, 12 Jan 2005 05:33:41 GMT

Hi Ganesh,

Call me stupid (you probably do) but I don't see anything in that code that writes to the EventLog. I guess that's why the script is called query.pl

But, don't mind. I needed it only for some exeptionnal error handling and a system call with logevent does the job nicely.

Thanx
Georg

Re: Write to EventLog (lotsof points !!!)

Jon Finley — Wed, 12 Jan 2005 16:28:03 GMT

From Gary Cooper's first post, the second link go to page 3.
http://www.windowsitpro.com/WindowsScripting/Articles/ArticleID/16404/pg/3/3.html

WriteEventLog() is the function discussed.

Jon