search for: eventlog

Bugs item #28904, was opened at 2011-02-02 10:41 You can respond by visiting: http://rubyforge.org/tracker/?func=detail&atid=411&aid=28904&group_id=85 Category: win32-eventlog Group: Code Status: Open Resolution: None Priority: 3 Submitted By: Jason Bourne (jbourne) Assigned to: Nobody (None) Summary: Gem win32-eventlog v0.5.2 on Ruby 1.9.1 and 1.9.2 Initial Comment: 1.Requirement: Read the latest lines of the Windows Application Event Viewer to verify deployment statu...

...6 at gmail.com> wrote: >> Can you tell us which record numbers in particular are causing you >> problems? We aren''t finding any issues. > > all of them. the description is not complete or empty. > > in windows xp it works fine, eg > > #<struct Struct::EventLogStruct record_number=268, time_generated=Tue Dec 04 12: > 10:48 +0800 2007, time_written=Tue Dec 04 12:10:48 +0800 2007, event_id=642, eve > nt_type="audit_success", category=7, source="Security", computer="BG-MIS-PBOT", > user="Pe\361aIJM", string_in...

...at arch disk]# fixme:heap:HeapSetInformation 0x110000 1 (nil) 0 fixme:imm:ImmDisableIME (-1): stub fixme:advapi:RegisterEventSourceW ((null),L"Microsoft Office 12"): stub fixme:advapi:ReportEventW (0xcafe4242,0x0001,0x0000,0x00001388,(nil),0x000b,0x00000106,0x300bcf54,0x79ca2c): stub err:eventlog:ReportEventW L"office12setup" err:eventlog:ReportEventW L"{10120000-0f00-0000-0000--0000000ff1ce}" err:eventlog:ReportEventW L"12.0.4518.1014" err:eventlog:ReportEventW L"x" err:eventlog:ReportEventW L"0x80040154" err:eventlog:ReportEventW L"ac...

Pe?a wrote: > Hi Dan, > i get a segfault on windows-pr if i run mulitple tails by threading, one thread for each host i''m tailing. > > C:\family\ruby\win-eventlog>dtail.rb > thread/tail-ing Security on host1 > thread/tail-ing Security on host2 > thread/tail-ing Security on host3 > thread/tail-ing Security on host4 > thread/tail-ing Security on host5 > thread/tail-ing Security on host6 > c:/ruby/lib/ruby/gems/1.8/gems/windows-pr-0.5.1-...

...terEventSourceW (L"",L"Wine"): stub fixme:advapi:ReportEventA (0xcafe4242,0x0004,0x0001,0x00000001,(nil),0x0001,0x00000000,0x688a72b0,(nil)): stub fixme:advapi:ReportEventW (0xcafe4242,0x0004,0x0001,0x00000001,(nil),0x0001,0x00000000,0x121250,(nil)): stub fixme:advapi:GetNumberOfEventLogRecords (0xcafe4242,0x32fcb0) stub eventlog.c:835: Test failed: Expected 1 records, got 0 fixme:advapi:GetOldestEventLogRecord (0xcafe4242,0x32fcbc) stub eventlog.c:840: Test failed: Expected oldest to be 1 or higher, got 0 fixme:advapi:DeregisterEventSource (0xcafe4242) stub fixme:advapi:OpenEventL...

All, I got a bug report from Greg Holmes where the description wasn''t being returned properly. At the moment, if there''s no event associated with the event id, then the description is empty. However, it turns out that there can still be associated information about the event. So, I propose the following tweak to the get_description private method: # If FormatMessage()

Bugs item #28904, was opened at 2011-02-02 18:41 You can respond by visiting: http://rubyforge.org/tracker/?func=detail&atid=411&aid=28904&group_id=85 Category: win32-eventlog Group: Code Status: Open Resolution: None Priority: 3 Submitted By: Jason Bourne (jbourne) Assigned to: Nobody (None) Summary: Gem win32-eventlog v0.5.2 on Ruby 1.9.1 and 1.9.2 Initial Comment: 1.Requirement: Read the latest lines of the Windows Application Event Viewer to verify deployment statu...

...e at charge ~]$ fixme:heap:HeapSetInformation 0x110000 1 (nil) 0 fixme:imm:ImmDisableIME (-1): stub fixme:advapi:RegisterEventSourceW ((null),L"Microsoft Office 12"): stub fixme:advapi:ReportEventW (0xcafe4242,0x0001,0x0000,0x00001388,(nil),0x000b,0x00000106,0x300bcf54,0x79ca3c): stub err:eventlog:ReportEventW L"office12setup" err:eventlog:ReportEventW L"{10120000-0f00-0000-0000--0000000ff1ce}" err:eventlog:ReportEventW L"12.0.4518.1014" err:eventlog:ReportEventW L"x" err:eventlog:ReportEventW L"0x80040154" err:eventlog:ReportEventW L"ac...

...ason. Tim thought it might be because of the space in the name, but my attempt to quote it did not seem to help. In order to follow along, install PowerShell, create the foo.dll using the foo.mc file in the ''test'' directory, and try the following code: require ''win32/eventlog'' include Win32 EventLog.add_event_source( :source => ''Windows PowerShell'', :key_name => ''foo'', :category_count => 2, :event_message_file => ''foo.dll'', :category_mess...

...fixme:shell:DllCanUnloadNow stub fixme:advapi:RegisterEventSourceW ((null),L"Microsoft Office 11"): stub fixme:advapi:ReportEventW (0xcafe4242,0x0001,0x0000,0x00001388,(nil),0x000b,0x000000d6,0x300971b4,0x7df9f9e4): stub err:eventlog:ReportEventW L"office11setup" err:eventlog:ReportEventW L"{90110c0a-6000-11d3-8cfe-0150048383c9}" err:eventlog:ReportEventW L"11.0.5614.0" err:eventlog:ReportEventW L"NIL" err:eventlog:ReportEventW L"NIL" err:eventlog:ReportEventW L"NIL" e...

Hi, I''ve got EventLog#write and EventLog.add_event_source methods done. Well, I *think* they''re done, but I can''t get the data (text) to work properly, and I''m not sure if it''s a bug in my .mc file, the add_event_source method, the write method, or just a goof in my test file. The...

we have recently purchased a security appliance that wants to poll the DC's for login info (ipaddress:logged-in-user) to give more granular access to internet resources this seems possible with samba 4.8.4 my smb.conf     log level = 1 auth_audit:3     eventlog list = Application System Security SyslogLinux It doesn't look like audit events are ending up in /usr/local/samba/var/locks/eventlog/security.tdb which where they might go. I certainly am seeing lots of login audit info in log.samba, so that's working. Any suggestions?

> -----Original Message----- > From: Joey Gibson [mailto:joey@joeygibson.com] > Sent: Tuesday, October 19, 2004 6:11 AM > To: ruby-talk@ruby-lang.org; Berger, Daniel > Subject: Re: Another Interesting "Problem" with Win32-EventLog > > > Daniel Berger wrote: > > >After getting home from work today I tried again on my home machine. > >My "System" log has over 1700 messages in it, but a test script with > >no failure. I intentionally wrote several hundred event log messages > >t...

Hi all, A user recently ran into an issue with win32-eventlog and the EventLog#read method when reading a saved log file. It seems that there''s an issue. After some experimentation I found that the problem seems to be that the initial buffer to ReadEventLog() in line 558 is too small, so it tries a second call to ReadEventLog() with a larger buf...

...t supported yet fixme:thread:NtQueryInformationThread info class 9 not supported yet fixme:advapi:RegisterEventSourceW ((null),L".NET Runtime 2.0 Error Reporting"): stub fixme:advapi:ReportEventW (0xcafe4242,0x0001,0x0000,0x00001388,(nil),0x000b,0x000000ec,0x3009a1b4,0x7ed9b5d4): stub err:eventlog:ReportEventW L"clr20r3" err:eventlog:ReportEventW L"vpxclient.exe" err:eventlog:ReportEventW L"2.5.0.2" err:eventlog:ReportEventW L"48755eaa" err:eventlog:ReportEventW L"mscorlib" err:eventlog:ReportEventW L"2.0.0.0" err:eventlog:ReportEve...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For those interested in some more detail of the EventLog features in the upcoming Samba 3.0.21 release, see: http://www.samba.org/~jerry/Samba-EventLog-HOWTO.txt Thanks to Brian Mroan and Marcin Porwit at Centeris for all their hard work. cheers, jerry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunder...

Yes, after further research the solution could possibly be to create a python script to monitor the json output in log.samba and push out eventlog formatted events to 'Security' with eventlogadm. Seems a lot of work. The appliance in question also supports getting the necessary info via the netapi call "netsessionenum" I have tried that and a wireshark dump shows samba replying with WERR_INVALID_LEVEL. if you could shed an...

..., action L"ExecuteAction" returned 1603 bash-3.2$ fixme:imm:ImmDisableIME (-1): stub fixme:advapi:RegisterEventSourceW ((null),L"Microsoft Office 11"): stub fixme:advapi:ReportEventW (0xcafe4242,0x0001,0x0000,0x00001388,0x0,0x000b,0x0000 00d6,0x300971b4,0x6248f5e4): stub err:eventlog:ReportEventW L"office11setup" err:eventlog:ReportEventW L"{90110409-6000-11d3-8cfe-0150048383c9}" err:eventlog:ReportEventW L"11.0.5614.0" err:eventlog:ReportEventW L"NIL" err:eventlog:ReportEventW L"NIL" err:eventlog:ReportEventW L"NIL" e...

> -----Original Message----- > From: Joey Gibson [mailto:joey@joeygibson.com] > Sent: Monday, October 18, 2004 9:29 AM > To: Ruby-Talk; Berger, Daniel > Subject: Another Interesting "Problem" with Win32-EventLog > > > After Daniel patched the Win32-EventLog code to properly handle > "strange" event messages (I''ll leave it to Daniel to explain that) my > program started working, but then dies. Here''s the full text > of the program: > > require '&...

Hi all, I''m working on the EventLog#read method for the pure Ruby version of win32-eventlog, but I''m stuck on the get_description private method. Here are the problems: * I don''t think I''m advancing the EVENTLOGRECORD properly between iterations. Take a look at the end of the "while dwread > 0&...