Re^4: Win32::EventLog searching the wrong logs

http://www.perlmonks.org?node_id=1084753

in reply to Re^3: Win32::EventLog searching the wrong logs
in thread Win32::EventLog searching the wrong logs

You probably tried those logs as administrator ... maybe you don't have permissions :/

Comment on Re^4: Win32::EventLog searching the wrong logs

Replies are listed 'Best First'.
Re^5: Win32::EventLog searching the wrong logs by Anonymous Monk on May 02, 2014 at 09:00 UTC
Viewing EVTX files in Windows XP? says XP is not compatible with the evtx files, use a machine with Vista or better to view them which probably means they're not viewable throug OpenLog and thus Win32::EventLog , so you'll probably have to use EvtQuery cause they're probably xml files good luck :)	[reply]
Re^6: Win32::EventLog searching the wrong logs by FloydATC (Deacon) on May 02, 2014 at 09:54 UTC
The question then is, will Win32::EventLog support this in the foreseeable future or would I have to try my (very inexperienced) hand at implementing it myself? I have yet to succeed in any XS related work even in Linux so I'm not really motivated to try it in Windows :-\| -- FloydATC Time flies when you don't know what you're doing	[reply]
Re^7: Win32::EventLog searching the wrong logs by Anonymous Monk on May 02, 2014 at 10:16 UTC
The question then is, will Win32::EventLog support this in the foreseeable future I think no, but doesn't hurt to ask :) rt://Win32-EventLog-0.077 or would I have to try my (very inexperienced) hand at implementing it myself? I have yet to succeed in any XS related work even in Linux so I'm not really motivated to try it in Windows :-\| Ha ha, should be easy given you have something to copy/paste that already compiles Both the .xs part and the linked msdn examples are fairly identical in usage ... except in the new api XML is involved :) the .xs and old api articles are close enough to follow I think I've just had an idea read event log using WMI ... DBD::WMI Which approach is better to read Windows Event log in C#? WMI or EventLog - Stack Overflow WMI, Windows Event Logs and User Privileges - CodeProject WMI Tasks: Event Logs (Windows) Script Get Remote Event Logs With Powershell PsLogList Might be interesting some notes regarding WMI and security Re^4: How to Start a Process in a Remote Win32 Machine using Perl and WMI	[reply]
Re^8: Win32::EventLog searching the wrong logs by FloydATC (Deacon) on May 04, 2014 at 07:26 UTC
Re^5: Win32::EventLog searching the wrong logs by FloydATC (Deacon) on May 02, 2014 at 09:46 UTC
I've tried running as local "Administrator" and as a domain user who is member of "Domain Admins", which in turn is member of the local "Administrators" group. I wouldn't completely rule out the possibility of UAC pulling a funny trick on me, but I think the anonymous comment about Viewing EVTX files in Windows XP and EvtQuery sounds like a more promising lead. -- FloydATC Time flies when you don't know what you're doing	[reply]

In Section Seekers of Perl Wisdom