Community FAQ
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
jstewckf
Engaged Sweeper
I am using the following report to browse through the error logs from my workstations, and I have not been able to figure out how to exclude/filter out one specific event (Eventcode 8001). I feel I am overlooking something pretty simple. Any thoughts?

Select Top 1000000 tsysOS.Image As icon,
tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tblAssets.IPAddress,
tsysOS.OSname,
tblAssets.SP,
tblNtlog.Eventcode,
Case tblNtlog.Eventtype When 1 Then 'Error' When 2 Then 'Warning'
When 3 Then 'Information' When 4 Then 'Success Audit'
When 5 Then 'Failure Audit' End As Eventtype,
tblNtlogFile.Logfile,
tblNtlogMessage.Message,
tblNtlogSource.Sourcename,
tblNtlogUser.Loguser,
tblNtlog.TimeGenerated
From tblAssets
Inner Join tsysOS On tsysOS.OScode = tblAssets.OScode
Inner Join tblNtlog On tblAssets.AssetID = tblNtlog.AssetID
Inner Join tblNtlogFile On tblNtlogFile.LogfileID = tblNtlog.LogfileID
Inner Join tblNtlogMessage On tblNtlogMessage.MessageID = tblNtlog.MessageID
Inner Join tblNtlogSource On tblNtlogSource.SourcenameID =
tblNtlog.SourcenameID
Inner Join tblNtlogUser On tblNtlogUser.LoguserID = tblNtlog.LoguserID
Inner Join tblComputersystem On tblAssets.AssetID = tblComputersystem.AssetID
Where tblAssets.Domain = 'my_domain' And Case tblNtlog.Eventtype When 1 Then 'Error'
When 2 Then 'Warning' When 3 Then 'Information' When 4 Then 'Success Audit'
When 5 Then 'Failure Audit'
End = 'error' And tblNtlog.TimeGenerated > GetDate() - 1 And
tblComputersystem.Domainrole < 2
Order By tblNtlog.TimeGenerated Desc
1 ACCEPTED SOLUTION
Hemoco
Lansweeper Alumni
Add the below to the Criteria column for the tblNtlog.Eventcode expression.
<> 8001

For future reporting, we would recommend reviewing some SQL tutorials, as the Lansweeper report builder uses standard SQL queries and what you are asking is a basic SQL thing. There are several good tutorials available online, e.g.: http://www.w3schools.com/sql/default.asp

View solution in original post

1 REPLY 1
Hemoco
Lansweeper Alumni
Add the below to the Criteria column for the tblNtlog.Eventcode expression.
<> 8001

For future reporting, we would recommend reviewing some SQL tutorials, as the Lansweeper report builder uses standard SQL queries and what you are asking is a basic SQL thing. There are several good tutorials available online, e.g.: http://www.w3schools.com/sql/default.asp

Reports & Analytics

Ask about reports you're interested in and share reports you've created. Subscribe to receive daily updates of reports shared in the Community.

New to Lansweeper?

Try Lansweeper For Free

Experience Lansweeper with your own data.
Sign up now for a 14-day free trial.

Try Now