I am using a script to parse Windows 2008 R2 event logs (specifically, application events). It works well...too well. I use this:
$log = new Win32::EventLog("Application")
$Win32::EventLog::GetMessageText = 1;
Then, read the log:
However, I would like to pare down the information I get in the Message, perhaps just pulling back the Exception information, request information, etc...
Is there a way to specify WHICH part of the message to request/display, preferably without having to parse the entire Message and pull out what I want?
Thanks in advance for any tips!