Question about events in eventlog.

[lgvlgv]

I have been looking on topics here to find some way to have a program/script monitor eventlogs in real time, but had come up short.

Any one have any idea where to look or id there are some api or something that can be used to pick up these in real time and not scan the logfiles every x min/sec?

//Regards

[careca]

Hi, maybe you can read the file really fast, each 100ms or something, and that would be almost realtime.

But what do you mean with monitor? do you mean, to show new text being added to the log?

[JLogan3o13]

Unfortunately, I don't think you can do this in AutoIt without looking at the log. There are a couple open source projects that do it in other languages, if you're just looking to resolve an issue (see link below)

http://www.codeproject.com/Articles/4857/A-realtime-event-log-monitoring-tool

[lgvlgv]

i found this witch i think i can put in a loop, what du u guys think?

to have in in real time i realise isent neccesary, in the end it will generate a mail and if more then 20 or so "stop".

ignore the wrong Do statement

expandcollapse popup

#include
#include

Global $iMemo

_Main()

Func _Main()
Local $hEventLog, $aEvent

; Create GUI
GUICreate("EventLog", 400, 300)
$iMemo = GUICtrlCreateEdit("", 2, 2, 396, 300, 0)
GUICtrlSetFont($iMemo, 9, 400, 0, "Courier New")
GUISetState()

; Read most current event record
Do
$hEventLog = _EventLog__Open("", "System")
$aEvent = _EventLog__Read($hEventLog, True, False) ; read last event
;~ $hEventLog = _EventLog__Open("", "System")
;~ $aEvent = _EventLog__Read($hEventLog)
;~ $aEvent = _EventLog__Read($hEventLog, True, False)
If $aEvent[8]="Error" Or $aEvent[8]="Fel" Then
ConsoleWrite("Result ............: " & $aEvent[0]& @CRLF)
ConsoleWrite("Record number .....: " & $aEvent[1]& @LF)
ConsoleWrite("Submitted .........: " & $aEvent[2] & " " & $aEvent[3]& @LF)
ConsoleWrite("Generated .........: " & $aEvent[4] & " " & $aEvent[5]& @LF)
ConsoleWrite("Event ID ..........: " & $aEvent[6]& @LF)
ConsoleWrite("Type ..............: " & $aEvent[8]& @LF)
ConsoleWrite("Category ..........: " & $aEvent[9]& @LF)
ConsoleWrite("Source ............: " & $aEvent[10]& @LF)
ConsoleWrite("Computer ..........: " & $aEvent[11]& @LF)
ConsoleWrite("Username ..........: " & $aEvent[12]& @LF)
ConsoleWrite("Description .......: " & $aEvent[13]& @LF)
$aEvent=-1
EndIf

_EventLog__Close($hEventLog)
$sMessage=""
$aEvent=""
Sleep(1000)
; Loop until user exits
Until GUIGetMsg() = $GUI_EVENT_CLOSE

EndFunc ;==>_Main

; Write a line to the memo cont

Edited March 20, 2013 by lgvlgv