cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
MartinNr5
Engaged Sweeper
Hi.

Is it possible (via a report or otherwise) to display a list of all event log entries for a selected group of computers (either via OU or otherwise) for a specific time period?

Once a week I go through all event log entries for our critical servers for the past week to see if there's anything we need to follow up but I haven't found a clever way of doing this with Lansweeper.

At the moment I go to each server and scroll through the events one by one and this isn't an efficient solution.

Thanks in advance.
4 REPLIES 4
MartinNr5
Engaged Sweeper
Thanks!
Hemoco
Lansweeper Alumni
In the current version only errors and warnings are logged.
MartinNr5
Engaged Sweeper
Thank you very much for the quick reply, much appreciated.

I modified it a bit in order to filter out all our servers no matter what OU they are in (as they were spread out too much) and sorted it on TimeGenerated:

Select Top 1000000 Web40OSName.Compimage As icon, dbo.tblComputers.Computername,
dbo.tblComputers.ComputerUnique, tblntlogevent.TimeGenerated,
tblntlogevent.Eventcode, tblntlogevent.Eventtype, tblntlogevent.Sourcename,
tblntlogevent.Message
From dbo.tblComputers Inner Join
dbo.web40ActiveComputers On dbo.tblComputers.Computername =
dbo.web40ActiveComputers.Computername Inner Join
Web40OSName On Web40OSName.Computername = dbo.tblComputers.Computername
Inner Join
tblntlogevent On dbo.tblComputers.Computername = tblntlogevent.Computername
Inner Join
tblADComputers On dbo.tblComputers.Computername = tblADComputers.Computername
Where tblntlogevent.TimeGenerated > GetDate() - 7 And
dbo.tblComputers.OScode Like '%S'
Order By tblntlogevent.TimeGenerated Desc


My only question now is if it is possible to filter out only warnings and errors? It seems as if this is all that is logged but I'm not sure and I can't find a field in the tblntlogevent table that indicates severity of the event.

Thanks again!
Hemoco
Lansweeper Alumni
You can use this sample report

Select Top 1000000 dbo.tblComputers.Computername,
dbo.tblComputers.ComputerUnique, dbo.tblComputers.Domain,
Web40OSName.Compimage As icon, tblntlogevent.Eventcode,
tblntlogevent.Eventtype, tblntlogevent.Sourcename,
tblntlogevent.TimeGenerated, tblntlogevent.Message
From dbo.tblComputers Inner Join
dbo.web40ActiveComputers On dbo.tblComputers.Computername =
dbo.web40ActiveComputers.Computername Inner Join
Web40OSName On Web40OSName.Computername = dbo.tblComputers.Computername
Inner Join
tblntlogevent On dbo.tblComputers.Computername = tblntlogevent.Computername
Inner Join
tblADComputers On dbo.tblComputers.Computername = tblADComputers.Computername
Where tblntlogevent.TimeGenerated > GetDate() - 7 And tblADComputers.OU =
'your ou'


Change tblADComputers.OU = 'your ou' to the OU you need.
tblntlogevent.TimeGenerated > GetDate() - 7 displays events of the last 7 days