I am using a script to parse Windows 2008 R2 event logs (specifically, application events). It works well...too well. I use this:

$log = new Win32::EventLog("Application") 
$Win32::EventLog::GetMessageText = 1;
[download]

Then, read the log:

while ($log->Read((EVENTLOG_SEQUENTIAL_READ|EVENTLOG_FORWARDS_READ), 
1,$entry)){
...
print $entry->{Message};
...
}
[download]

However, I would like to pare down the information I get in the Message, perhaps just pulling back the Exception information, request information, etc... Is there a way to specify WHICH part of the message to request/display, preferably without having to parse the entire Message and pull out what I want? Thanks in advance for any tips!