in reply to Reading Subkeys with Win32::TieRegistry

Do you have to search the registry for the event log files?
AFAIK, the eventlog files are located on %systemroot%/system32/config directory...
They have the extension .evt
If you find these "evt" files, you'll be able to find all the event log files in Windows.
Then you can think of using Win32::EventLog module to process them...
Try reading this, eventquery.vbs
Might be of some help...
Raghu
  • Comment on Re: Reading Subkeys with Win32::TieRegistry

Replies are listed 'Best First'.
Re^2: Reading Subkeys with Win32::TieRegistry
by Al_Gee (Initiate) on Jan 26, 2009 at 14:33 UTC
    See my reply to the next comment. I am going to be using Win32::EventLog, but it needs the names of the event logs to back up. I am trying to avoid having to create a hash with all of the possible .evt files and their associated event log names.

    Thanks--

    Al

[reply]

In Section Seekers of Perl Wisdom