[JM] 7/4/2009, Using the [LogParser]'s scriptable COM with Tcl:

Example #1<<br>>
Input: Event Log<<br>>
Output: CSV file<<br>>
----
 package require tcom
 console show

 set oLogQuery [::tcom::ref createobject "MSUtil.LogQuery"]

 set oEVTInputFormat [::tcom::ref createobject "MSUtil.LogQuery.EventLogInputFormat"]
 $oEVTInputFormat direction "BW"

 set oCSVOutputFormat [::tcom::ref createobject "MSUtil.LogQuery.CSVOutputFormat"]
 $oCSVOutputFormat tabs true

 set strQuery "SELECT TimeGenerated, EventID INTO C:\\output.csv FROM System"
 append strQuery " WHERE SourceName = 'Application Popup'"

 $oLogQuery ExecuteBatch $strQuery $oEVTInputFormat $oCSVOutputFormat

after running this example, the following file will be c:\output.csv)<<br>>

----
Example #2<<br>>

''in construction...''
----
'''[Jorge] - 2009-07-04 23:58:22'''
of course, you have to execute:
 C:\LogParser>regsvr32 LogParser.dll
to "register" the LogParser scriptable COM component.
----
[male] - 2010-02-23 - an example accessing the Windows event log [LogParser accessing the Windows event log]
----
!!!!!!
%| [Category Parsing] | [Category File] |%
!!!!!!