M
marfi95
I'm automating a piece of my app to allow my customers to send me a
copy of their event logs (for diagnostics) on demand just through the
click of a button. I know I can use the EventLog/EventObjEntry objects
and write the event entries to another flat file or xml or something
like that, but I think that will take way too long to run based on just
iterating through the entries and writing to a file.
What I'd like to do is basically what you can do in EventViewer, just
make another copy of the .evt file and send that. The catch I have is
how to determine programatically the file name of the log from the log
name. For example, the "Application" log is
\system32\config\appevent.evt. Is there some way to determine this for
my custom logs, so I can then just do a file.copy of the file and send
that. Is it a hard rule that all event logs are stored in
\system32\config ? What if the name of the log is > 8 characters ?
Or is there a better way I'm not thinking of. Basically, all I'm
trying to do is get several event logs and other debugging files sent
to me w/o the customer having to get the files manually and send thru
email or something.
Thanks,
Mark
copy of their event logs (for diagnostics) on demand just through the
click of a button. I know I can use the EventLog/EventObjEntry objects
and write the event entries to another flat file or xml or something
like that, but I think that will take way too long to run based on just
iterating through the entries and writing to a file.
What I'd like to do is basically what you can do in EventViewer, just
make another copy of the .evt file and send that. The catch I have is
how to determine programatically the file name of the log from the log
name. For example, the "Application" log is
\system32\config\appevent.evt. Is there some way to determine this for
my custom logs, so I can then just do a file.copy of the file and send
that. Is it a hard rule that all event logs are stored in
\system32\config ? What if the name of the log is > 8 characters ?
Or is there a better way I'm not thinking of. Basically, all I'm
trying to do is get several event logs and other debugging files sent
to me w/o the customer having to get the files manually and send thru
email or something.
Thanks,
Mark