Hi, I have the following code:
open (READ,"C:\\timewritten.txt")or die "Can't open READ: $!\n";
$timewritten = <READ>;
close (READ) or die "Can't close READ: $!\n";
$x = 0;
use Win32::EventLog;
$handle=Win32::EventLog->new("Application")
or die "Can't open Application EventLog\n";
$handle->GetNumber($recs)
or die "Can't get number of EventLog records\n";
print "No. of records = $recs\n";
$handle->GetOldest($base)
or die "Can't get number of oldest EventLog record\n";
print "Oldest record is record no. $base\n";
# To append:
open (LOGFILE,">>C:\\cygwin_syslog.txt") or die "Can't open LOGFILE:
$!\n";
# Or to overwrite (in which case you don't have to create the file).
#open (LOGFILE,">C:\\cyglog.txt") or die "Can't open LOGFILE: $!\n";
while ($x < $recs) {
$handle->Read(EVENTLOG_FORWARDS_READ|EVENTLOG_SEEK_READ,
$base+$x,
$hashRef)
or die "Can't read EventLog entry #$x\n";
%deref = %$hashRef;
# Next line is new #####
unless ($timewritten > $deref{'TimeGenerated'}) {
if ($deref{'Source'} eq 'Cygwin') {
print LOGFILE "$deref{'RecordNumber'}: $deref{'Strings'}\n";
} # close 'if' block.
# Next 2 lines are new #####
$time = $deref{'TimeGenerated'};
} # close 'unless' block.
$x++;
}
close (LOGFILE) or die "Can't close LOGFILE: $!\n";
# Next 3 lines are new #####
open (WRITE, ">C:\\timewritten.txt") or die "Can't open WRITE: $!\n";
print WRITE $time;
close (WRITE) or die "Can't close WRITE: $!\n";
}
}
but I am under windows Nt and I have the following warning:
Use of unintialized value in mumeric lt(<) at line of 'TimeGenerated'
I expect that Idon't have a hash key called 'TimeGenerated'. Perhaps
it's spelled differently.
How canh i find the right name to replace 'TimeGenerated'.
Thanks
