Read NT Event Log from Java

Is there any way to read Windows NT Event Log from Java?
Thanks
Wilson Pu

see http://www.javaworld.com/javaworld/jw-09-2001/jw-0928-ntmessages_p.html

Similar Messages

How to write to windows event logs from determinations-server under IIS

This is just an FYI technical bit of information I wish someone had shared with me before I started trying to write OPA errors to the windows event log... Most problems writing to the windows event log from log4net occur because of permissions. Some problems are because determinations-server does not have permissions to create some registry entries. Some problems cannot be resolved unless specific registry entry permissions are actually changed. We had very little consistency with the needed changes across our servers, but some combination of the following would always get the logging to the windows event log working.
To see log4net errors as log4net attempts to utilize the windows event log, temporarily add the following to the web.config:
<appSettings>

<add key="log4net.Internal.Debug" value="true"/>
</appSettings>
<system.diagnostics>
<trace autoflush="true">
<listeners>
<add
name="textWriterTraceListener"
type="System.Diagnostics.TextWriterTraceListener"
initializeData="logs/InfoDSLog.txt" />
</listeners>
</trace>
</system.diagnostics>
To add an appender for the windows event viewer, try the following in the log4net.xml:
<appender name="EventLogAppender" type="log4net.Appender.EventLogAppender" >
<param name="ApplicationName" value="OPA" />
<param name="LogName" value="OPA" />
<param name="Threshold" value="all" />
<layout type="log4net.Layout.PatternLayout">
<conversionPattern value="%date [%thread] %-5level %logger [%property{NDC}] - %message%newline" />
</layout>
<filter type="log4net.Filter.LevelRangeFilter">
<levelMin value="WARN" />
<levelMax value="FATAL" />
</filter>
</appender>
<root>
<level value="warn"/>
<appender-ref ref="EventLogAppender"/>
</root>
To put the OPA logs under the Application Event Log group, try this:
Create an event source under the Application event log in Registry Editor. To do this, follow these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application
4.     Right-click the Application subkey, point to New, and then click Key.
5.     Type OPA for the key name.
6.     Close Registry Editor.
To put the OPA logs under a custom OPA Event Log group (as in the demo appender above), try this:
Create an event log in Registry Editor. To do this, follow these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
4.     Right-click the eventlog subkey, point to New, and then click Key.
5.     Type OPA for the key name.
6.     Right-click the new OPA key and add a new DWORD called "MaxSize" and set it to "1400000" which is about 20 Meg in order to keep the log file from getting too large.
7.     The next steps either help or sometimes cause an error, but you can try these next few steps... If you get an error about a source already existing, then you can delete the key.
8.     Right-click the OPA subkey, point to New, and then click Key.
9.     Type OPA for the key name.
10.     Close Registry Editor.
You might need to change permissions so OPA can write to the event log in Registry Editor. If you get permission errors, try following these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
4.     Right-click the EventLog key, select Permissions.
5.     In the dialog that pops up, click Add...
6.     Click Advanced...
7.     Click Locations... and select the current machine by name.
8.     Click Find Now
9.     Select both the Network user and IIS_IUSERS user and click OK and OK again. (We never did figure out which of those two users was the one that fixed our permission problem.)
10.     Change the Network user to have Full Control
11.     Click Apply and OK
To verify OPA Logging to the windows event logs from Determinations-Server:
Go to the IIS determinations-server application within Server Manager.
Under Manage Application -> Browse Application click the http link to pull up the local "Available Services" web page that show the wsdl endpoints.
Select the /determinations-server/server/soap.asmx?wsdl link
Go to the URL and remove the "?wsdl" from the end of the url and refresh. This will throw the following error into the logs:
ERROR Oracle.Determinations.Server.DSServlet [(null)] - Invalid get request: /determinations-server/server/soap.asmx
That error should show up in the windows event log, OR you can get a message explaining why security stopped you in "logs/InfoDSLog.txt" if you used the web.config settings from above.
http://msdn.microsoft.com/en-us/library/windows/desktop/aa363648(v=vs.85).aspx
Edited by: Paul Fowler on Feb 21, 2013 9:45 AM

Thanks for sharing this information Paul.

How to Read a CAB File from JAVA?

Hi,
Anyone knows how to read a CAB File from java. I need to read a property file of txt file that is packaged in CAB file & then based on that, I have to do processing. Is there anyway to do it.
I had tried using java.util.zip.ZipFile Class, but it does work for JAR, but not for CAB.
siva.

Perhaps there's something in the Cabinet SDK that will help:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dncabsdk/html/cabdl.asp

Export all Errors and warnings event logs from Application, security and system for last 24 hours and send it to IT administrators.

Dear Team,
I want a powershell script to export servers event logs into excel and it send that file to IT administrators.
Excel format:
Server Name, Log Name, Time, Source, Event ID and Message.
Require logs:
Application, Security, System, DFS Replication and Directory service.
And these excel file has to be send to Email address.
And it would be good, if i get a script same for Hard disk space and RAM and CPU utilization.

Here are some examples:
http://gallery.technet.microsoft.com/site/search?f%5B0%5D.Type=RootCategory&f%5B0%5D.Value=logs&f%5B0%5D.Text=Logs%20and%20monitoring&f%5B1%5D.Type=SubCategory&f%5B1%5D.Value=eventlogs&f%5B1%5D.Text=Event%20Logs
¯\_(ツ)_/¯

Does anybody know how to export the events log from a IPS 4260 ?

My company has a Cisco IPS 4260 and we used to get the log from the Cisco Security Manager but since July the software failed and now (December) I need to get / export the log from July to December that I think it is saved into the IPS. Is it possible? Does anybody know the command to see the saved log or the commands or procedure to export the log into a TFTP or FTP ?
I'll really appreciate your help, thanks.

No; That cannot be done. Only through a SDEE server.
Events are stored on a hard drive that the IPS has, if it has not been reloaded they should be there with no issues.
Get the application "IME". If I am not mistaken, you would be able to see those events there and I think there is a way to export them from there.
Mike Rojas

Reading NT Event Log

Hello all,
We are currently developing a Labview application that needs to check for and read events in the standard NT Event Log. This file exists as an odd Binary file in NT and is therefore tricky to read. We have found an EXE that will dump the current Log to a CSV file but we were hoping that there may be an active X reference that we could use to read the NT log directly.
Has anybody done this in Labview or any other Language?
Regards
Ian Billingsley
Billican

I have a customer that does something like this. He reads a CSV file also. However; he does this in Visual C++. I recommend checking the Microsoft support pages in addition to this one. There may be information there that can help you.
Good luck

Error in reading sp(Oracle 9i) from java.

Hello,
While I am reading sp,it returns a result set,in java an error is occuring.Anybody can help me for solving this problem.I am attching the java code,error message and procedure below.
import java.sql.*;
public class CallOracleProc
public static void main(String[] argv)
Connection conn=null;
ResultSet rs=null;
CallableStatement cstmt=null;
try
     Class.forName("oracle.jdbc.driver.OracleDriver");
     conn=DriverManager.getConnection("jdbc:oracle:thin:@192.168.1.56:1521:hpcl","uday","uday");
cstmt = conn.prepareCall("{? = call PKGMORTGAGEAPP.sproc_GetRates}");
cstmt.registerOutParameter(1, oracle.jdbc.driver.OracleTypes.CURSOR );
cstmt.executeUpdate();
while (rset.next())
str += rset.getInt(1)+" "+ rset.getInt(2)+" "
rset.getString(3)" "+rset.getInt(4)+" "+rset.getInt(5)+" "+rset.getInt(6)+"\n";
rset.close();
cstmt.close();
conn.close();
               catch(Exception e)
                    System.out.println("Exception in connection"+e.getMessage());
Erro message is
Exception in connectionORA-06550: line 1, column 28:
PLS-00306: wrong number or types of arguments in call to 'SPROC_GETRATES'
ORA-06550: line 1, column 7:
PL/SQL: Statement ignored
The procedure is given below
Create Package Body PKGMORTGAGEAPP
AS
PROCEDURE sproc_GetRates (rateCursor out typeRateCursor)
IS
BEGIN
OPEN rateCursor FOR SELECT * FROM tblMortgageRates;
END;
PROCEDURE sproc_CreateApplication
(fullName in VARCHAR,
propertyValue in NUMBER,
downPayment in NUMBER,
rateID_ in NUMBER,
isRateLocked in NUMBER,
isPreApproved in NUMBER,
insertResult out NUMBER
IS
BEGIN
INSERT INTO tblApplications
VALUES (fullName, propertyValue, downPayment, rateID_,
isRateLocked, isPreApproved);
insertResult := 1;
EXCEPTION
WHEN OTHERS THEN
insertResult := 0;
END;
END pkgMortgageApp;
BIPIN.V

Prabhu wrote:
We are not able to connect from SQLplus as we.. If i issue this command in Sqlplus from client machine 'sqlplus admin/admin@'(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=TCP)(HOST=<Ip Adddress>)(PORT=1521)))(CONNECT_DATA=(SID=orcl)))'' it was throwing the below error.
Error: ORA-12541: TNS:no listener
Do i need add get any config details in the client machine..
Could please tell me what is the general procedure to access the DB server from client machine..on DB Server issue following OS commands
lsnrctl start
lsnrctl status
lsnrctl service
COPT commands & results, then PASTE all back here

Reading Forms Key Mappings from java bean - how ?

I want to be able to invoke key trigger code in a Forms 10g run-time from a java bean (extends BeanWrapper) either by:
a) using inherited method calls passing the KeyEvent retrieved from my listener, or
b) dispatching a custom event from the bean with a parameter value which identifies the key trigger to process (not the key code & modifier string).
On a), I've not been able to identify any method in the BeanWrapper hierarchy tree that might help me do this, and samples like (http://forms.pjc.bean.over-blog.com/categorie-465294.html) seem to imply that no such method exists.
In terms of b), the oracle.forms.engine.KeyMapTable class seems to be what I want (seems to translate the KeyEvent into a FormAction/string using server settings), but getting a hold of this object through (oracle.forms.engine.Main)getHandler().getApplet() doesn't seem possible.
How are others invoking eg: key-crerec from a Forms 10g bean component in a way which is sensitive to server key mappings ?
Thanks in advance for your help.

I have no experience with KeyEvents in Forms, but if the KeyMapTable class really is the solution, can't you just instantiate one yourself.
Looking at the constructor it only needs a single argument, the oracle.forms.engine.Runform class. You should be able to get a handle on it with:
IHandler hander = getHandler();
if (handler instanceof UICommon) {
UICommon u = (UICommon)handler;
// u.getDispatcher() should get oracle.forms.engine.Runform
}Not sure if it will work, but you can give it a try.
I love pushing the PJC and Oracle Forms applet to its limits. Not really sure if Oracle intended the PJC framework to do stuff like this, but it sure would have helped if they have JavaDoc about the oracle.forms.* classes

Accessing/Writing/Reading Tape/Compact Discs from Java

Hi,
Does Java provide any API for reading/writing files on Tapes/Compact Discs?
Or is there any repository or API for the same?
Ud highly appreciate to any pointers for the same.
TIA,
Regards,
Prashanth Babu.

From Unsupported Features and APIs:
Unsupported Feature
Alternative
Remote invocations with a transport protocol other than HTTPS (including plain text HTTP).
Not applicable.
One alternative could be to create a web service that you can call from JCS.
Jani Rautiainen
Fusion Applications Developer Relations
https://blogs.oracle.com/fadevrel/

Event log from CFP2020

Hi again all!
Small query here - while running a vi on a CFP-2020 device, is it possible to log events onto a CF card? For example if button 'A' is pressed on a touchscreen controlling the vi in the CFP2020 unit, and event 'B' occurs, is it possible to log when and how often this happens?
Thanks,
Steve

Magic!
I'll have a look - that gives me hope
Any tips you may have to aid me doing this please add as well - thankyou so far
Steve

Read Synchronous interface data from Java Stack

All,
I am working on a report to report synchornous timeouts to the management. Though I can see the synchronous messages for classical and ICO scenarios in message monitoring. I cannot find those messages using msg_id i get from message moniroting audit_log in bc_msg or bc_msg_audit table.
Can someone let me know from which table can I pull this information.
Thanks.

I tried to analyse this, did a poc and what i found was.
When i was creatingan Asynchronous ICO and running it. An entry was getting created in bc_msg table.
But
When i was creating a Synchronous ICO and running it. No entries were created in bc_msg table. I have also tried after enabling the logging and storing using the "user scenario specific configuration" option, still no luck. No entries were found in bc_msg table.
I too wonder where the information will be stored.
Regards
Osman

How to read xml node content from java[ urgent]

My tag is
<person1> a="hello">
<person><first>Steve</first></person>
</person1>
I want if i read <person1> tag then it store its inner content in a string.
i.e my output should be
<person><first>Steve</first></person>

Hi, parse the file using dom.then print out the root tag.you will have to strip the indentation this way.or you could use sax.

Behaviuor in reading logs from DB13 - redo log backup for DB

Hi all,
I have a question ,
We have scheduled redo log backup using HP DP Tool.
When I am reading a backup log from DB13 , I am facing the weird behavior.
copy, delete, save
0000
aeomzyok.cds
copy, delete, save
0001
aeomzyoh.cds
Where ever the RC is 000 I am able to read the log files available at OS level . But not able to read the log for other RC.
Please help me to understand this
Thanks,
Gnana

Hi Gnana.
Use the latest BR*Tools as there were problems with permission issues while creating logfiles. In the latest BR*Tools version, the different logfiles are created with predefined permission levels that suits to SAP needs.
Also it worth to check if the BR*Tools executables hav the correct ownership.
113747 Owners and authorizations for BR*Tools
Regards,
János

[Server 2008R2] Filter event logs for logged in users from clients on domain

Hi All,
I am looking for a script which can be run on a domain controller to check which user accounts logged in on the domain. I am looking for both the username and client. Reason why I need this is to check where service accounts are used.
Thanks.
Kind regards,
Bart
Bart Timmermans | Consultant at inovativ
Follow me @
My Blog | Linkedin |
Twitter
Please mark as Answer, if my post answers your Question. Vote as Helpful, if it is helpful to you.

Hi Bart,
To parse the event log, you can refer to the cmdlet "Get-WinEvent", and how to use this cmdlet to parse event log, please check this article, you can also add the "-computername" to query event log from remote computers:
Use PowerShell Cmdlet to Filter Event Log for Easy Parsing
To monitor the logon history, please check this function to start:
function Get-Win7LogonHistory {
$logons = Get-EventLog Security -AsBaseObject -InstanceId 4624,4647 |
Where-Object { ($_.InstanceId -eq 4647) -or (($_.InstanceId -eq 4624) -and ($_.Message -match "Logon Type:\s+2")) -or (($_.InstanceId -eq 4624) -and ($_.Message -match "Logon Type:\s+10")) }
$poweroffs = Get-EventLog System -AsBaseObject -InstanceId 41
$events = $logons + $poweroffs | Sort-Object TimeGenerated
if ($events) {
foreach($event in $events) {
# Parse logon data from the Event.
if ($event.InstanceId -eq 4624) {
# A user logged on.
$action = 'logon'
$event.Message -match "Logon Type:\s+(\d+)" | Out-Null
$logonTypeNum = $matches[1]
# Determine logon type.
if ($logonTypeNum -eq 2) {
$logonType = 'console'
} elseif ($logonTypeNum -eq 10) {
$logonType = 'remote'
} else {
$logonType = 'other'
# Determine user.
if ($event.message -match "New Logon:\s*Security ID:\s*.*\s*Account Name:\s*(\w+)") {
$user = $matches[1]
} else {
$index = $event.index
Write-Warning "Unable to parse Security log Event. Malformed entry? Index: $index"
} elseif ($event.InstanceId -eq 4647) {
# A user logged off.
$action = 'logoff'
$logonType = $null
# Determine user.
if ($event.message -match "Subject:\s*Security ID:\s*.*\s*Account Name:\s*(\w+)") {
$user = $matches[1]
} else {
$index = $event.index
Write-Warning "Unable to parse Security log Event. Malformed entry? Index: $index"
} elseif ($event.InstanceId -eq 41) {
# The computer crashed.
$action = 'logoff'
$logonType = $null
$user = '*'
# As long as we managed to parse the Event, print output.
if ($user) {
$timeStamp = Get-Date $event.TimeGenerated
$output = New-Object -Type PSCustomObject
Add-Member -MemberType NoteProperty -Name 'UserName' -Value $user -InputObject $output
Add-Member -MemberType NoteProperty -Name 'ComputerName' -Value $env:computername -InputObject $output
Add-Member -MemberType NoteProperty -Name 'Action' -Value $action -InputObject $output
Add-Member -MemberType NoteProperty -Name 'LogonType' -Value $logonType -InputObject $output
Add-Member -MemberType NoteProperty -Name 'TimeStamp' -Value $timeStamp -InputObject $output
Write-Output $output
} else {
Write-Host "No recent logon/logoff events."
Get-Win7LogonHistory
Refer to:
https://github.com/pdxcat/Get-LogonHistory/blob/master/Get-LogonHistory.ps1
If there is anything else regarding this issue, please feel free to post back.
If you have any feedback on our support, please click here.
Best Regards,
Anna Wang
TechNet Community Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

NullPointerException calling SP from Java

I'm getting the following NullPointerExcpeption stack trace when
trying to call a stored procedure from my Java code. The
exception (note that it is NOT a SQLException) is generated on
the CallableStatement execute() method.
Event Logged: java.lang.NullPointerException
Event Logged: at oracle/jdbc/ttc7/TTCAdapter.newTTCType
(TTCAdapter.java:270)
Event Logged: at
oracle/jdbc/ttc7/TTCAdapter.createNonPlsqlTTCColumnArray
(TTCAdapter.java:256)
Event Logged: at
oracle/jdbc/ttc7/TTCAdapter.createNonPlsqlTTCDataSet
(TTCAdapter.java:231)
Event Logged: at oracle/jdbc/ttc7/TTC7Protocol.doOall7
(TTC7Protocol.java:1366)
Event Logged: at
oracle/jdbc/ttc7/TTC7Protocol.parseExecuteFetch
(TTC7Protocol.java:831)
Event Logged: at
oracle/jdbc/driver/OracleStatement.executeNonQuery
(OracleStatement.java:1446)
Event Logged: at
oracle/jdbc/driver/OracleStatement.doExecuteOther
(OracleStatement.java:1372)
Event Logged: at
oracle/jdbc/driver/OracleStatement.doExecuteWithTimeout
(OracleStatement.java:1898)
Event Logged: at
oracle/jdbc/driver/OraclePreparedStatement.executeUpdate
(OraclePreparedStatement.java:365)
Event Logged: at
oracle/jdbc/driver/OraclePreparedStatement.execute
(OraclePreparedStatement.java:408)
Event Logged: at IMWatchdog.run (IMWatchdog.java)
Event Logged: at java/lang/Thread.run (Thread.java)
I'm using the 8.1.7 JDBC drivers with Java 1.2.2.
The stored procedure is defined in the package as:
create or replace package intmgrp as
PROCEDURE get_exp_date (
               pLotID in MM_LOT_ST.LOT_ID%
TYPE,
               pMaterialID in
MM_LOT_ST.MATERIAL_ID%TYPE,
               pExpirationDate out date
END;
CREATE or replace package body intmgrp as
-- global vars
text varchar2(255);
PROCEDURE get_exp_date (
               pLotID in MM_LOT_ST.LOT_ID%
TYPE,
               pMaterialID in
MM_LOT_ST.MATERIAL_ID%TYPE,
               pExpirationDate out date
               ) is
BEGIN
select Expiration_Date
into pExpirationDate
from Mm_Lot_St
where Lot_ID = pLotID
     and Material_ID = pMaterialID;
EXCEPTION
WHEN OTHERS then
text := 'intmgrp.get_exp_date - reading mm_lot_st. ' ||
substr(SQLERRM,1,80);
raise_application_error(-20201,text);
END get_exp_date;
END intmgrp;
My java code looks like this:
     private static CallableStatement mGetExpDateCstmt;
     public boolean connectDB( )
          final String strGetExpDate = new String("
intmgrp.get_exp_date(?, ?, ?) ");
          java.sql.Date curExpDate = new java.sql.Date(0L);
try {
          // FIND CLASS FOR THE PROPER DRIVER
          Class.forName( getDBDriver( ) );
          // OPEN CONNECTION TO DB
          mDBConnection = DriverManager.getConnection(
getDBURL( ),
                         getDBUser( ),
                         getDBPassword( ) );
// Prepare the statement that will be used to verify the
connection
               mGetExpDateCstmt =
mDBConnection.prepareCall(strGetExpDate);
               mGetExpDateCstmt.setString(1, mLotID);
               mGetExpDateCstmt.setString(2,
mMaterialID);
               mGetExpDateCstmt.registerOutParameter(3,
Types.DATE);
               mGetExpDateCstmt.execute();
               curExpDate = mGetExpDateCstmt.getDate(3);
               return true;
catch (SQLException esql)
               mErrorMonitor.logError("In connectDB,
critical error - unable to connect to database. SQLException: ");
     while (esql != null) {
               mErrorMonitor.logError(" Message: " +
esql.getMessage ());
               mErrorMonitor.logError(" SQLState: " +
esql.getSQLState ());
               mErrorMonitor.logError(" ErrorCode: " +
esql.getErrorCode ());
          esql = esql.getNextException();
return false;
               catch( Exception e )
               mErrorMonitor.logError("In connectDB, an
exception was encountered. Message: " + e.getMessage( ) );
                    e.printStackTrace();
return false;
Please respond directly to my e-mail -- thanks in advance.
-Dan Buchko

I've found the problem. Looks like I have to wrap the procedure
in a PL/SQL block. So changing the SQL from:
final String strGetExpDate = new String(" intmgrp.get_exp_date
to:
final String strGetExpDate = new String(" begin
intmgrp.get_exp_date(?, ?, ?); end; ");
fixed the problem.
-Dan Buchko

Read NT Event Log from Java

Similar Messages

Maybe you are looking for