cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
jstewckf
Engaged Sweeper
I am using the following report to browse through the error logs from my workstations, and I have not been able to figure out how to exclude/filter out one specific event (Eventcode 8001). I feel I am overlooking something pretty simple. Any thoughts?

Select Top 1000000 tsysOS.Image As icon,
tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tblAssets.IPAddress,
tsysOS.OSname,
tblAssets.SP,
tblNtlog.Eventcode,
Case tblNtlog.Eventtype When 1 Then 'Error' When 2 Then 'Warning'
When 3 Then 'Information' When 4 Then 'Success Audit'
When 5 Then 'Failure Audit' End As Eventtype,
tblNtlogFile.Logfile,
tblNtlogMessage.Message,
tblNtlogSource.Sourcename,
tblNtlogUser.Loguser,
tblNtlog.TimeGenerated
From tblAssets
Inner Join tsysOS On tsysOS.OScode = tblAssets.OScode
Inner Join tblNtlog On tblAssets.AssetID = tblNtlog.AssetID
Inner Join tblNtlogFile On tblNtlogFile.LogfileID = tblNtlog.LogfileID
Inner Join tblNtlogMessage On tblNtlogMessage.MessageID = tblNtlog.MessageID
Inner Join tblNtlogSource On tblNtlogSource.SourcenameID =
tblNtlog.SourcenameID
Inner Join tblNtlogUser On tblNtlogUser.LoguserID = tblNtlog.LoguserID
Inner Join tblComputersystem On tblAssets.AssetID = tblComputersystem.AssetID
Where tblAssets.Domain = 'my_domain' And Case tblNtlog.Eventtype When 1 Then 'Error'
When 2 Then 'Warning' When 3 Then 'Information' When 4 Then 'Success Audit'
When 5 Then 'Failure Audit'
End = 'error' And tblNtlog.TimeGenerated > GetDate() - 1 And
tblComputersystem.Domainrole < 2
Order By tblNtlog.TimeGenerated Desc
1 ACCEPTED SOLUTION
Hemoco
Lansweeper Alumni
Add the below to the Criteria column for the tblNtlog.Eventcode expression.
<> 8001

For future reporting, we would recommend reviewing some SQL tutorials, as the Lansweeper report builder uses standard SQL queries and what you are asking is a basic SQL thing. There are several good tutorials available online, e.g.: http://www.w3schools.com/sql/default.asp

View solution in original post

1 REPLY 1
Hemoco
Lansweeper Alumni
Add the below to the Criteria column for the tblNtlog.Eventcode expression.
<> 8001

For future reporting, we would recommend reviewing some SQL tutorials, as the Lansweeper report builder uses standard SQL queries and what you are asking is a basic SQL thing. There are several good tutorials available online, e.g.: http://www.w3schools.com/sql/default.asp