win32utils devel - May 2006 - EventLog#tail followup

The solution I see is something like this:

* Set a @last instance variable in the constructor.

* In the read_last_record function, check to see if @last is nil.  If it 
is nil, then it''s our first read.  Use the current approach, and set 
@last to the record number.

* If @last isn''t nil, use EVENTLOG_FORWARDS_READ | EVENTLOG_SEEK_READ 
flags instead, and use @last + 1 as the offset.

I tested this in the pure Ruby version and it seems to work fine.

Sound good?

Dan

Hi,

2006/5/20, Daniel Berger <djberg96 at gmail.com>:
> The solution I see is something like this:
>
> * Set a @last instance variable in the constructor.
>
> * In the read_last_record function, check to see if @last is nil.  If it
> is nil, then it''s our first read.  Use the current approach, and
set
> @last to the record number.
>
> * If @last isn''t nil, use EVENTLOG_FORWARDS_READ |
EVENTLOG_SEEK_READ
> flags instead, and use @last + 1 as the offset.
>
> I tested this in the pure Ruby version and it seems to work fine.
>
> Sound good?
>
That sounds reasonable.

I searched some utilities of tail for event log.
http://www.codeproject.com/tools/Tail_for_Win32.asp?df=100&forumid=26136&exp=0&select=677277

www.sysinternals.com/Utilities/PsLogList.html

HTH,

Park Heesob