You can inventory out of (some of) the event logs: http://myitforum.com/cs2/blogs/jgilbert/archive/2007/08/08/inventorying-remote-assistance-requests-and-connections.aspx
Criselda, if you were to query wmi in root\cimv2, using something like Select * FROM Win32_NTLogEvent WHERE LogFile='System' AND EventID='whatever that id is' does that return the distinct results you are hoping for? So then, yes, with a configuration.mof edit, and then importing the new custom class which you'll have created, then yes--that information can be reported. Of course, the long-term caveats are if you replace that bad hard drive, the historical "I had a bad drive" will still be in eventvwr, and still be reported, unless you adopt a procedure where when that drive is replaced, eventvwr is cleared (unless of course replacing the bad drive really means "replace the drive, and put the image down" then of course it doesn't matter) Sherry Kissinger ________________________________ From: Jimmy Martin <[email protected]> To: "[email protected]" <[email protected]> Sent: Thu, June 13, 2013 6:05:12 AM Subject: RE: [mssms] extend hardware inventory in sccm2012 This is where scom would come in... Sent from my Windows Phone ________________________________ From: Hilvano, Criselda Sent: 6/13/2013 1:43 AM To: [email protected] Subject: [mssms] extend hardware inventory in sccm2012 Hello I need to extend HW inventory to report a specific event id in system log of a machine that indicates a bad sectors on a hard drive. Is this a realistic request? Is SCCM2012 the right tool to do this considering that only specific event id will be reported and real time data is not a concern, since we have HW inventory that runs every 3 days. Can someone please provide the right edits on how to do this? Criselda Hilvano Baptist 100. Well beyond a century. This message and any files transmitted with it may contain legally privileged, confidential, or proprietary information. If you are not the intended recipient of this message, you are not permitted to use, copy, or forward it, in whole or in part without the express consent of the sender. Please notify the sender of the error by reply email, disregard the foregoing messages, and delete it immediately. PPlease consider the environment before printing this email...
