You can probably dig into the source code of this eventlog monitoring package and find something useful.
http://sourceforge.net/projects/evntmon/
It has been fast enough for us so far..
-----Original Message-----
From: Patrick J. LoPresti [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 06, 2004 3:16 PM
To: Strasser, Volker
Cc: [EMAIL PROTECTED]
Subject: Re: eventlog "dns server" "file replication service"
"Strasser, Volker" <[EMAIL PROTECTED]> writes:
> hello,
>
> I want to read the eventlogs "dns server" file replication service" on a
> windows 2000 or windos 2003 domaincontroller.
> I tried a lot with win32::eventlogs but it cannot read it.
> who knows how to do that?
You can use the Win32_NTLogEvent WMI class for this:
http://msdn.microsoft.com/library/en-us/wmisdk/wmi/win32_ntlogevent.asp
For example, using the "instances.pl" script at
<http://unattended.sourceforge.net/apps.html#instances>, this command:
instances.pl Win32_NTLogEvent -q "LogFile = \"System\" AND EventCode = 6005"
...enumerates all of the System Log events with an Event ID of 6005
(see also http://support.microsoft.com/?id=245222).
Specifying a LogFile of "DNS Server" or "File Replication Service"
should work for you.
But be warned: This can be slow. In fact, for me at least (Win2k),
queries which match lots of records seem to take forever. More
specific queries work fine.
- Pat
_______________________________________________
Perl-Win32-Admin mailing list
[EMAIL PROTECTED]
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs
----- This message is for the named person's use only. It may contain confidential, proprietary or legally privileged information. No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please delete it and all copies from your system, destroy any hard copies and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. Nomura Holding America Inc., Nomura Securities International, Inc, and their respective subsidiaries each reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorized to state the views of such entity. Unless otherwise stated, any pricing information in this message is indicative only, is subject to change and does not constitute an offer to deal at any price quoted. Any reference to the terms of executed transactions should be treated as preliminary only and subject to our formal written confirmation.
_______________________________________________ Perl-Win32-Admin mailing list [EMAIL PROTECTED] To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs
