
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-08-2010 03:12 PM
Hi.
Is it possible (via a report or otherwise) to display a list of all event log entries for a selected group of computers (either via OU or otherwise) for a specific time period?
Once a week I go through all event log entries for our critical servers for the past week to see if there's anything we need to follow up but I haven't found a clever way of doing this with Lansweeper.
At the moment I go to each server and scroll through the events one by one and this isn't an efficient solution.
Thanks in advance.
Is it possible (via a report or otherwise) to display a list of all event log entries for a selected group of computers (either via OU or otherwise) for a specific time period?
Once a week I go through all event log entries for our critical servers for the past week to see if there's anything we need to follow up but I haven't found a clever way of doing this with Lansweeper.
At the moment I go to each server and scroll through the events one by one and this isn't an efficient solution.
Thanks in advance.
Labels:
- Labels:
-
Archive
4 REPLIES 4

Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-08-2010 03:47 PM
Thanks!

Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-08-2010 03:46 PM
In the current version only errors and warnings are logged.

Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-08-2010 03:40 PM
Thank you very much for the quick reply, much appreciated.
I modified it a bit in order to filter out all our servers no matter what OU they are in (as they were spread out too much) and sorted it on TimeGenerated:
My only question now is if it is possible to filter out only warnings and errors? It seems as if this is all that is logged but I'm not sure and I can't find a field in the tblntlogevent table that indicates severity of the event.
Thanks again!
I modified it a bit in order to filter out all our servers no matter what OU they are in (as they were spread out too much) and sorted it on TimeGenerated:
Select Top 1000000 Web40OSName.Compimage As icon, dbo.tblComputers.Computername,
dbo.tblComputers.ComputerUnique, tblntlogevent.TimeGenerated,
tblntlogevent.Eventcode, tblntlogevent.Eventtype, tblntlogevent.Sourcename,
tblntlogevent.Message
From dbo.tblComputers Inner Join
dbo.web40ActiveComputers On dbo.tblComputers.Computername =
dbo.web40ActiveComputers.Computername Inner Join
Web40OSName On Web40OSName.Computername = dbo.tblComputers.Computername
Inner Join
tblntlogevent On dbo.tblComputers.Computername = tblntlogevent.Computername
Inner Join
tblADComputers On dbo.tblComputers.Computername = tblADComputers.Computername
Where tblntlogevent.TimeGenerated > GetDate() - 7 And
dbo.tblComputers.OScode Like '%S'
Order By tblntlogevent.TimeGenerated Desc
My only question now is if it is possible to filter out only warnings and errors? It seems as if this is all that is logged but I'm not sure and I can't find a field in the tblntlogevent table that indicates severity of the event.
Thanks again!

Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-08-2010 03:19 PM
You can use this sample report
Change tblADComputers.OU = 'your ou' to the OU you need.
tblntlogevent.TimeGenerated > GetDate() - 7 displays events of the last 7 days
Select Top 1000000 dbo.tblComputers.Computername,
dbo.tblComputers.ComputerUnique, dbo.tblComputers.Domain,
Web40OSName.Compimage As icon, tblntlogevent.Eventcode,
tblntlogevent.Eventtype, tblntlogevent.Sourcename,
tblntlogevent.TimeGenerated, tblntlogevent.Message
From dbo.tblComputers Inner Join
dbo.web40ActiveComputers On dbo.tblComputers.Computername =
dbo.web40ActiveComputers.Computername Inner Join
Web40OSName On Web40OSName.Computername = dbo.tblComputers.Computername
Inner Join
tblntlogevent On dbo.tblComputers.Computername = tblntlogevent.Computername
Inner Join
tblADComputers On dbo.tblComputers.Computername = tblADComputers.Computername
Where tblntlogevent.TimeGenerated > GetDate() - 7 And tblADComputers.OU =
'your ou'
Change tblADComputers.OU = 'your ou' to the OU you need.
tblntlogevent.TimeGenerated > GetDate() - 7 displays events of the last 7 days
