Hopefully "ScriptingTipsAndTricks" helps you with your batch file or vbscript scripting :-)\IntroductionEvent Logs

---

Event Logs

All Windows machines have at least 3 events logs which can be viewed with the "Windows Event Viewer":

1. Application log:

   Events written by programs, these are classified as "error", "warning", or "information".

   Some links:

   • http://eventopedia.cloudapp.net/Events/?/Operating+System/Microsoft+Windows/Built-in+logs/Windows+2000-2003/Application+Log

2. System log:

   System events are logged by Windows and Windows system services, and again these are classified as "error", "warning", or "information".

   Some links:

   • http://eventopedia.cloudapp.net/Events/?/Operating+System/Microsoft+Windows/Built-in+logs/Windows+2000-2003/System+Log

3. Security log:

   This of course holds security-related events. These events are called audits and can be "Audit success" or "Audit Failed".

   Some links:

   • http://eventopedia.cloudapp.net/Events/?/Operating+System/Microsoft+Windows/Built-in+logs/Windows+2000-2003/Security+Log
   • http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/default.aspx

The event log information is stored in ".evt" files.

Other pages with event log information:

• Default ACLs on Windows Event Logs
• Monitoring and Troubleshooting Using Event Logs
• ABCEventLog (object that allows you to log events under your own source names)
• List of event log related tools

Apart from the Windows "Event Viewer", there are many tools that allow you to view or dump the logs to a file, they include:

• The "Win32_NTLogEvent" WMI class.
• Some NirSoft's tools
• Some SysInternals' tools

Please email me any feedback, additional information or corrections. See this page online (look for updates) ScriptingTipsAndTricks© is (C)opyright Dennis Bareis 2003-2008 (All rights reserved). Sunday September 07 2014 at 12:50pm Visit ScriptingTipsAndTricks's Home Page