[HELP] Windows EventLog read ?

[HELP] Windows EventLog read ?

Post by hongpan » Wed, 19 May 2004 15:13:49


Hello,

I am having a bit a problem in getting information out of the windows system
event log file.

I know how to get information out of the backup file of the event file.
//------------------------------------------------------
OpenBackupEventLog Opens a handle to a backup event log.
OpenEventLog Opens a handle to an event log.

------------------------------------------------------//

But I do not know how to get informaiton out of the original event file.
(C:\WINNT\system32\config\SysEvent.Evt
C:\WINNT\system32\config\SecEvent.Evt
C:\WINNT\system32\config\AppEvent.Evt)

I have tried copying the file and then trying to read it.

Is there a special function for reading the original event file?

Thanks!
 
 
 

[HELP] Windows EventLog read ?

Post by Igor Tande » Fri, 21 May 2004 01:49:11


Just pass "System", "Security" or "Application" correspondingly as the
second parameter to OpenEventLog
--
With best wishes,
Igor Tandetnik

"For every complex problem, there is a solution that is simple, neat,
and wrong." H.L. Mencken