
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎05-12-2010 09:19 PM
How can I query from event viewer.
I can find 2 tables but no connection with computer
tsysEventAlerts
tsysEventfilter
I can find 2 tables but no connection with computer
tsysEventAlerts
tsysEventfilter
Labels:
- Labels:
-
Report Center
5 REPLIES 5

Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎05-21-2010 10:14 PM
You an use filter
>=getdate()-1
>=getdate()-1

Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎05-21-2010 09:52 PM
I think I figured it out:
Select Top 1000000 tblcomputers.Computer, tblntlogevent.Eventcode, tblntlogevent.Logfile, tblntlogevent.Message, tblntlogevent.Sourcename, tblcomputers.Description, tblntlogevent.TimeGenerated From tblntlogevent Inner Join tblcomputers On tblcomputers.Computername = tblntlogevent.Computername Where tblntlogevent.Eventcode = 7 And tblntlogevent.Sourcename = 'disk' And DateDiff(d, tblntlogevent.TimeGenerated, Current_TimeStamp) <= 2
Select Top 1000000 tblcomputers.Computer, tblntlogevent.Eventcode, tblntlogevent.Logfile, tblntlogevent.Message, tblntlogevent.Sourcename, tblcomputers.Description, tblntlogevent.TimeGenerated From tblntlogevent Inner Join tblcomputers On tblcomputers.Computername = tblntlogevent.Computername Where tblntlogevent.Eventcode = 7 And tblntlogevent.Sourcename = 'disk' And DateDiff(d, tblntlogevent.TimeGenerated, Current_TimeStamp) <= 2

Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎05-21-2010 08:25 PM
Does anyone know how to change this query to only report entries from the current day?

Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎05-13-2010 01:11 AM
Works great
Now I have a report that shows all machines with an error on hard drives.
Select Top 1000000 tblcomputers.Computer, tblntlogevent.Eventcode, tblntlogevent.Logfile, tblntlogevent.Message, tblntlogevent.Sourcename, tblcomputers.Description From tblntlogevent Inner Join tblcomputers On tblcomputers.Computername = tblntlogevent.Computername Where tblntlogevent.Eventcode = 7 And tblntlogevent.Sourcename = 'disk'
Now I have a report that shows all machines with an error on hard drives.
Select Top 1000000 tblcomputers.Computer, tblntlogevent.Eventcode, tblntlogevent.Logfile, tblntlogevent.Message, tblntlogevent.Sourcename, tblcomputers.Description From tblntlogevent Inner Join tblcomputers On tblcomputers.Computername = tblntlogevent.Computername Where tblntlogevent.Eventcode = 7 And tblntlogevent.Sourcename = 'disk'

Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎05-12-2010 09:41 PM
You need table "tblntlogevent"
