‎03-16-2015 07:23 AM
Select Top 1000000 tblNtlogSource.Sourcename As EventSource,
tblAssets.AssetID,
Count(tblNtlog.EventlogID) As EventCount
From tblAssets
Inner Join tblNtlog On tblAssets.AssetID = tblNtlog.AssetID
Inner Join tblNtlogSource On tblNtlogSource.SourcenameID =
tblNtlog.SourcenameID
Where tblNtlog.TimeGenerated > GetDate() - 1
Group By tblNtlogSource.Sourcename,
tblAssets.AssetID
Order By EventCount Desc
Solved! Go to Solution.
‎03-16-2015 01:05 PM
Select Top 1000000 tblNtlogSource.Sourcename As EventSource,
tblAssets.AssetID,
tblNtlog.Eventcode,
tblNtlogMessage.Message,
Count(tblNtlog.EventlogID) As EventCount
From tblAssets
Inner Join tblNtlog On tblAssets.AssetID = tblNtlog.AssetID
Inner Join tblNtlogSource On tblNtlogSource.SourcenameID =
tblNtlog.SourcenameID
Inner Join tblNtlogMessage On tblNtlogMessage.MessageID = tblNtlog.MessageID
Where tblNtlog.TimeGenerated > GetDate() - 1
Group By tblNtlogSource.Sourcename,
tblAssets.AssetID,
tblNtlog.Eventcode,
tblNtlogMessage.Message
Order By EventCount Desc
‎03-30-2015 09:01 AM
‎03-27-2015 04:32 PM
Select Top 1000000 tblNtlogSource.Sourcename As EventSource,
tblNtlog.Eventcode,
tblNtlogMessage.Message,
Count(tblNtlog.EventlogID) As EventCount
From tblAssets
Inner Join tblNtlog On tblAssets.AssetID = tblNtlog.AssetID
Inner Join tblNtlogSource On tblNtlogSource.SourcenameID =
tblNtlog.SourcenameID
Inner Join tblNtlogMessage On tblNtlogMessage.MessageID = tblNtlog.MessageID
Where tblNtlog.TimeGenerated > GetDate() - 1
Group By tblNtlogSource.Sourcename,
tblNtlog.Eventcode,
tblNtlogMessage.Message
Order By EventCount Desc
‎03-25-2015 09:57 AM
EventSource Eventcode Eventtype Message EventCount
Microsoft-Windows-GroupPolicy 1085 Warning Windows failed to apply the Internet Explorer Zonemapping settings. 344
Microsoft-Windows-GroupPolicy 1085 Warning Windows failed to apply the Internet Explorer Zonemapping settings. 342
Microsoft-Windows-GroupPolicy 1085 Warning Windows failed to apply the Internet Explorer Zonemapping settings. 338
Microsoft-Windows-GroupPolicy 1085 Warning Windows failed to apply the Internet Explorer Zonemapping settings. 324
Microsoft-Windows-GroupPolicy 1085 Warning Windows failed to apply the Internet Explorer Zonemapping settings. 310
Microsoft-Windows-GroupPolicy 1085 Warning Windows failed to apply the Internet Explorer Zonemapping settings. 306
Microsoft-Windows-GroupPolicy 1085 Warning Windows failed to apply the Internet Explorer Zonemapping settings. 305
‎03-16-2015 01:16 PM
‎03-16-2015 01:05 PM
Select Top 1000000 tblNtlogSource.Sourcename As EventSource,
tblAssets.AssetID,
tblNtlog.Eventcode,
tblNtlogMessage.Message,
Count(tblNtlog.EventlogID) As EventCount
From tblAssets
Inner Join tblNtlog On tblAssets.AssetID = tblNtlog.AssetID
Inner Join tblNtlogSource On tblNtlogSource.SourcenameID =
tblNtlog.SourcenameID
Inner Join tblNtlogMessage On tblNtlogMessage.MessageID = tblNtlog.MessageID
Where tblNtlog.TimeGenerated > GetDate() - 1
Group By tblNtlogSource.Sourcename,
tblAssets.AssetID,
tblNtlog.Eventcode,
tblNtlogMessage.Message
Order By EventCount Desc
‎03-16-2015 11:34 AM
EventSource EventCount
Disk 671
Disk 583
Disk 187
‎03-16-2015 10:03 AM
Select Top 1000000 tblNtlog.TimeGenerated,
tblNtlogSource.Sourcename As EventSource,
tblAssets.AssetID,
tblNtlog.Eventcode,
tblNtlogMessage.Message
From tblAssets
Inner Join tblNtlog On tblAssets.AssetID = tblNtlog.AssetID
Inner Join tblNtlogSource On tblNtlogSource.SourcenameID =
tblNtlog.SourcenameID
Inner Join tblNtlogMessage On tblNtlogMessage.MessageID = tblNtlog.MessageID
Where tblNtlog.TimeGenerated > GetDate() - 1
Order By tblNtlog.TimeGenerated Desc
Experience Lansweeper with your own data. Sign up now for a 14-day free trial.
Try Now