Description:
This script file views given event with error and warning .
Note:
Run as Local System users
#To define a particular parameter, replace the 'parameterName' inside itsm.getParameter('parameterName') with that parameter's name
event_list=['1014']
event_levels=["3","4"]# Level 1 Critical,Level 2 Error,Level 3 Warning,Level 4 Information
event_logname="System"
import os
import ctypes
class disable_file_system_redirection:
_disable = ctypes.windll.kernel32.Wow64DisableWow64FsRedirection
_revert = ctypes.windll.kernel32.Wow64RevertWow64FsRedirection
def __enter__(self):
self.old_value = ctypes.c_long()
self.success = self._disable(ctypes.byref(self.old_value))
def __exit__(self, type, value, traceback):
if self.success:
self._revert(self.old_value)
def event_function(logname,level,eventid):
with disable_file_system_redirection():
for i in eventid:
cmd='wevtutil qe %s "/q:*[%s [(EventID=%s and (Level=%s or Level=%s ))]]" /f:text /c:5 /rd:True'%(logname,logname,i,level[0],level[1])
#print cmd
syslogs=os.popen(cmd).read()
if not syslogs:
print "No event Log for Event ID %s"%i
else:
print syslogs
event_function(event_logname,event_levels,event_list)
Comments