A fairly straightforward approach that's almost what you want, while leveraging the Win32 classes, is to have the Windows box do the event log parsing using the relevant modules and send the results onto the Linux box via a network socket or a text file on a network-accessible drive.

If not P, what? Q maybe?
"Sidney Morgenbesser"