Re^3: Win32::EventLog searching the wrong logs

Replies are listed 'Best First'.
Re^4: Win32::EventLog searching the wrong logs by Anonymous Monk on May 02, 2014 at 08:55 UTC
You probably tried those logs as administrator ... maybe you don't have permissions :/	[reply]
Re^5: Win32::EventLog searching the wrong logs by Anonymous Monk on May 02, 2014 at 09:00 UTC
Viewing EVTX files in Windows XP? says XP is not compatible with the evtx files, use a machine with Vista or better to view them which probably means they're not viewable throug OpenLog and thus Win32::EventLog , so you'll probably have to use EvtQuery cause they're probably xml files good luck :)	[reply]
Re^6: Win32::EventLog searching the wrong logs by FloydATC (Deacon) on May 02, 2014 at 09:54 UTC
The question then is, will Win32::EventLog support this in the foreseeable future or would I have to try my (very inexperienced) hand at implementing it myself? I have yet to succeed in any XS related work even in Linux so I'm not really motivated to try it in Windows :-\| -- FloydATC Time flies when you don't know what you're doing	[reply]
Re^7: Win32::EventLog searching the wrong logs by Anonymous Monk on May 02, 2014 at 10:16 UTC
Re^8: Win32::EventLog searching the wrong logs by FloydATC (Deacon) on May 04, 2014 at 07:26 UTC
Re^5: Win32::EventLog searching the wrong logs by FloydATC (Deacon) on May 02, 2014 at 09:46 UTC
I've tried running as local "Administrator" and as a domain user who is member of "Domain Admins", which in turn is member of the local "Administrators" group. I wouldn't completely rule out the possibility of UAC pulling a funny trick on me, but I think the anonymous comment about Viewing EVTX files in Windows XP and EvtQuery sounds like a more promising lead. -- FloydATC Time flies when you don't know what you're doing	[reply]
Re^4: Win32::EventLog searching the wrong logs by FloydATC (Deacon) on May 02, 2014 at 09:43 UTC
No, I've searched the whole subtree for "Setup" and "Forwarded" and fould only stuff like "VSS Setup"; applications that presumably log their own internal events. -- FloydATC Time flies when you don't know what you're doing	[reply]