C
Chris Kunselman
I am using the DUMPEL utility (from the Windows 2000 Resource Kit) to
export system event logs where source=print and event id =10 on a
Windows 2000 Print Server to a text file. This effectively provides
event logs documenting print jobs sent to networked printers.
I have noticed that occasionally the exported text file format of the
"description" field changes. This causes a problem when I parse this
field to separate information such as printer, user, and pages
printed.
Here is an example of the two different "description" formats that I
have witnessed:
Document 106, Microsoft Word - Document.doc owned by username was
printed on HP LaserJet 4100 via port Port_42. Size in bytes: 59647;
pages printed: 2
vs.
106 Microsoft Word - Document username HP LaserJet 4100 Port_42 59647
2
The same information is provided, but the second format doesn't
provide field descriptors which I use to help parse this string.
Looking at the event logs in Microsoft's Event Viewer does not show
any format difference in the "description" field. The DUMPEL utility
is being run with the exact same syntax and options from the same
server daily. Is anyone else experiencing this issue? Any ideas what
might be causing this?
Chris Kunselman
export system event logs where source=print and event id =10 on a
Windows 2000 Print Server to a text file. This effectively provides
event logs documenting print jobs sent to networked printers.
I have noticed that occasionally the exported text file format of the
"description" field changes. This causes a problem when I parse this
field to separate information such as printer, user, and pages
printed.
Here is an example of the two different "description" formats that I
have witnessed:
Document 106, Microsoft Word - Document.doc owned by username was
printed on HP LaserJet 4100 via port Port_42. Size in bytes: 59647;
pages printed: 2
vs.
106 Microsoft Word - Document username HP LaserJet 4100 Port_42 59647
2
The same information is provided, but the second format doesn't
provide field descriptors which I use to help parse this string.
Looking at the event logs in Microsoft's Event Viewer does not show
any format difference in the "description" field. The DUMPEL utility
is being run with the exact same syntax and options from the same
server daily. Is anyone else experiencing this issue? Any ideas what
might be causing this?
Chris Kunselman