Collecting Windows NT 4.0 events

I know its old and out of date but unfortunatley we have gotten rid of
almost every nt 4.0 server. But unfortunately the ones that are will
be here for a little bit longer. I am somewhat of a newbie so please
bare with me.

I am interested in collecting event og messages from my remaining nt
4.0 server. WMI may not be installed. Is there a way to collect the
nt events from the system log and the application log without using
WMI.

Paul

Wensi
Wed Jan 26 23:02:35 CST 2005

Command-line:
Enverquery.exe and eventcreate from MS, e.g. Windows 2003 tools

Wensi
"pjglick" <paul.glickenhaus@dol.state.nj.us> wrote in message
news:1106787021.675351.242460@z14g2000cwz.googlegroups.com...
>I know its old and out of date but unfortunatley we have gotten rid of
> almost every nt 4.0 server. But unfortunately the ones that are will
> be here for a little bit longer. I am somewhat of a newbie so please
> bare with me.
>
> I am interested in collecting event og messages from my remaining nt
> 4.0 server. WMI may not be installed. Is there a way to collect the
> nt events from the system log and the application log without using
> WMI.
>
> Paul
>

Steve
Thu Jan 27 22:19:58 CST 2005

The easiest way is to simply use PSLOGLIST.EXE from www.sysinternals.com to
export whatever event log your are interested in to a CSV file for later
viewing (The text files can get very large especially security logs, but you
can always zip them up to make them significantly smaller).

Regards,

--
Steve Seguis - MCSE, MVP Windows Server, SCJP
SCRIPTMATION
Automating the Enterprise
http://www.scriptmation.com


"pjglick" <paul.glickenhaus@dol.state.nj.us> wrote in message
news:1106787021.675351.242460@z14g2000cwz.googlegroups.com...
>I know its old and out of date but unfortunatley we have gotten rid of
> almost every nt 4.0 server. But unfortunately the ones that are will
> be here for a little bit longer. I am somewhat of a newbie so please
> bare with me.
>
> I am interested in collecting event og messages from my remaining nt
> 4.0 server. WMI may not be installed. Is there a way to collect the
> nt events from the system log and the application log without using
> WMI.
>
> Paul
>

Matthias
Fri Jan 28 04:07:47 CST 2005

Steve Seguis [MVP] wrote:
> The easiest way is to simply use PSLOGLIST.EXE from www.sysinternals.com to
> export whatever event log your are interested in to a CSV file for later
> viewing (The text files can get very large especially security logs, but you
> can always zip them up to make them significantly smaller).
>
> Regards,
>
Although I like all the fine free tools from www.sysinternals.com
I'd prefer www.logparser.com in this case.

The number of output options and possible selections with just one
program is incredible.

Logparser 2.2 is IMO an indispensable tool.

--
Gruesse Greetings Saludos Saluti Salutations
Matthias
---------+---------+---------+---------+---------+---------+---------+