in reply to Re^4: Win32::EventLog searching the wrong logs
in thread Win32::EventLog searching the wrong logs

Viewing EVTX files in Windows XP? says XP is not compatible with the evtx files, use a machine with Vista or better to view them which probably means they're not viewable throug OpenLog and thus Win32::EventLog , so you'll probably have to use EvtQuery cause they're probably xml files

good luck :)

  • Comment on Re^5: Win32::EventLog searching the wrong logs

Replies are listed 'Best First'.
Re^6: Win32::EventLog searching the wrong logs
by FloydATC (Deacon) on May 02, 2014 at 09:54 UTC

    The question then is, will Win32::EventLog support this in the foreseeable future or would I have to try my (very inexperienced) hand at implementing it myself? I have yet to succeed in any XS related work even in Linux so I'm not really motivated to try it in Windows :-|

    -- FloydATC

    Time flies when you don't know what you're doing

        I've started experimenting with using Powershell rather than Win32::EventLog to collect the events for me, so far it seems to work pretty well. Will share the code in CUFP once I've got it to do exactly what I want.

        -- FloydATC

        Time flies when you don't know what you're doing