logparser Message with error codes

Posted by nsr81 on Server Fault See other posts from Server Fault or by nsr81
Published on 2009-10-21T14:05:48Z Indexed on 2010/03/23 23:03 UTC
Read the original article Hit count: 529

Filed under:

LogParser

|

event-log

Hi All,

Is there anyway to get complete error message using LogParser?

When I run the following query:

logparser -i:EVT -o:NAT "SELECT TimeGenerated,EventID,Message from System WHERE EventTypeName='Error event'"

I get the following output:

2009-09-02 19:35:44 7000    The USB Mass Storage Driver service failed to start due to the following error: %%1058

The full "Message" in EventViewer is:

Description: The USB Mass Storage Driver service failed to start due to the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

How can I obtain complete message using logparser?

© Server Fault or respective owner

Related posts about LogParser

LogParser for Apache like Microsoft IIS LogParser

as seen on Server Fault - Search for 'Server Fault'
Is there a tool for Apache comparable to Microsoft's II LogParser? Thanks! >>> More
logparser Message with error codes

as seen on Server Fault - Search for 'Server Fault'
Hi All, Is there anyway to get complete error message using LogParser? When I run the following query: logparser -i:EVT -o:NAT "SELECT TimeGenerated,EventID,Message from System WHERE EventTypeName='Error event'" I get the following output: 2009-09-02 19:35:44 7000 The USB Mass Storage Driver… >>> More
need help with logparser on iis logs

as seen on Server Fault - Search for 'Server Fault'
I am using logparser 2.2 and need a script that does two things: finding urls that contain a value within referer need to loop over 30 folders logparser -rpt:-1 "select count(*)INTO feeds.txt from u_ex100302*.log where to_lowercase(cs(Referer)) like '/feeds%'" >>> More
logparser not matching on a LIKE pattern

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi I seem to have the strangest problem. I am using logparser to search an event log for some text that I know is there (i copied and pasted the string from the event into the sql search string). But the sql LIKE statement is returning a empty results. But other LIKE statments seem to be working file… >>> More
Logparser and Powershell

as seen on Geeks with Blogs - Search for 'Geeks with Blogs'
Logparser in powershell One of the few examples how to use logparser in powershell is from the Microsoft.com Operations blog. This script is a good base to create more advanced logparser scripts: $myQuery = new-object -com MSUtil.LogQuery $szQuery = “Select top 10 * from r:\ex07011210.log”; $recordSet… >>> More

Related posts about event-log

Windows Server 2008 Send Error Message on Event Log Error

as seen on Server Fault - Search for 'Server Fault'
We currently have a Windows Server 2008 machine that we have configured with a Custom Task to send an email whenever an error occurs in a certain Event Log. The trigger works perfectly, and sends emails whenever we need them to. HOWEVER, we cannot find a way to get the email to contain information… >>> More
How do I fix a custom Event Viewer Log that merges automatically with the Application log?

as seen on Server Fault - Search for 'Server Fault'
I am trying to create a custom event log for a Windows Service on Windows Server 2003. I would like to name the custom log "(ML) Startup Commands". However, when I add a registry key with that name to HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\, it adds a log but shows the exact same events that… >>> More
Modify the Event Log Source name for an SSIS package

as seen on Stack Overflow - Search for 'Stack Overflow'
I have an SSIS package that logs to the Event Log (yes, the event log!) The default "Source" of the log events is "SQLISPackage100" but I want it to be something like "AppName". Event Type: Error Event Source: SQLISPackage100 Event Category: None ... Description: Package "Foo" failed. I… >>> More
Modify the Event Log Source name for an SSIS package

as seen on Stack Overflow - Search for 'Stack Overflow'
I have an SQL Server integration Services (SSIS) package using the standard Event Log provider (yes, the event log! I know we can use SQL etc...) The default "Source" of the log events is "SQLISPackage100" but I want it to be something like "AppName" so that the errors are more visible between the… >>> More
New event log nowhere to be found after creating in PowerShell

as seen on Server Fault - Search for 'Server Fault'
Through PowerShell, I am attempting to create a new event log and write a test entry to it, but it is not showing up the Event Viewer. This is the command I'm using to create a new event log: new-eventlog -logname TestLog -source TestLog And to write a new event to it: write-eventlog TestLog -source… >>> More