Windows event data format

snare agent is pushing event logs to MARS - certain event (e.g. generic application events) show up with log data in binary format - in the windows event viewer the data is also displayed as text so the details of the event are clear (e.g "application failure w3wp.exe...." or similar. On MARS we see this:
0000: 41 70 70 6c 69 63 61 74 0008: 69 6f 6e 20 46 61 69 6c 0010: 75 72 65 20 20 77 33 77 0018: 70 2e 65 78 65 20 36 2e 0020: 30 2e 33 37 39 30 2e 33 0028: 39 35 39 20 69 6e 20 75 0030: 6e 6b 6e 6f 77 6e 20 30 0038: 2e 30 2e 30 2e 30 20 61 0040: 74 20 6f 66 66 73 .... etc.
Is there something we can do to convert this to text as part of the event parsing / processing function? or am i dreaming....?
Some of the wintel admins would like to leverage MARS for specific alerts but if the event description is lost in the syslog process then they're probably going to look for another tool for the job - would like to help them if i can.
thanks

Similar Messages

Set Query Window default date format to full date

When I run a query form the the Query Window in Visuial Studios 2012 all the date fields truncated to 'mm/dd/yyyy', but i need the full date returned. I am able to get full date from TO_char(MyDateField, 'yyyy-mm-dd hh24:mi:ss'), but if I do TO_DATE(MyDateField, 'yyyy-mm-dd hh24:mi:ss') it only returns 'mm/dd/yyyy'. I'm sure this is a simple setting in Visual studios but I cant find it to save my life. Is there there a way to have the full date returned by default? Thanks!

San,
could you be more precise about what do you want to do? If you want to save the date from the form in you database you need to convert it to DATE datatype inside the insert statement in you java code(using oracle to_date function). If you want to save current date/time you can use SYSDATE function in you sql insert statement.
what do you mean by "automatically fills up the same field in database"? There must be SQL Insert statement inside your java code that does the insert - can you post it here?
Mike

Date format in Query Result Window

In recent versions on OSD (trying with V3.2.20.09 Build MAIN-09.87) I've been unable to change the date format for results shown in the query results window via the NLS settings in Preferences, it's the same for other users on v3 in my area. Can anyone advice on whether anything can be done to resolve this issue or is there a bug in recent additions of OSD
Frustrating having a result show as 01-DEC-12 and I don't know whether it's 01-DEC-2012 or our default date of 01-DEC-4712 without having to hard code a to_char in my sql which I don't want to be doing all the time to analyse my results
I have an old version 1.5.4 Build MAIN-5940 and changing the NLS settings in preferences refrects correctly in the query results window
Any advice appreciated, Thanks

Thanks, looks like it's permission, tried on a different database supposed to be the same and it works when I update the preferences or run the alter session statement. Call to my admins to get on the case
Ta
for anyone else having simular issues, help are the statements I've tried to confirm it's permissions
alter session set NLS_DATE_FORMAT = 'DD-MON-RR HH24:MI:SS'; -- Original
alter session set NLS_DATE_FORMAT = 'DD-MON-RRRR HH24:MI:SS';
commit;
SELECT *
FROM nls_session_parameters
Edited by: lakeuk on 14-Nov-2012 06:37

Wrong date format by importing event from mail

When I try to create a new event in ical through a date in mail, it identifies the date in american format (MM/DD/YYYY) instead of the european format (DD/MM/YYYY)/
In the system prefs and in ical itself (when creating a stand-alone event) the format is correct. How can I import the date also through mail in the european format?

The system properties that Java can obtain through the static method System.getProperty() is the following 47:
java.runtime.name
sun.boot.library.path
java.vm.version
gopherProxySet
java.vm.vendor
java.vendor.url
path.separator
java.vm.name
file.encoding.pkg
java.vm.specification.name
user.dir
java.runtime.version
java.awt.graphicsenv
os.arch
java.io.tmpdir
line.separator
java.vm.specification.vendor
java.awt.fonts
os.name
java.library.path
java.specification.name
java.class.version
os.version
user.home
user.timezone
java.awt.printerjob
file.encoding
java.specification.version
user.name
java.class.path
java.vm.specification.version
java.home
user.language
java.specification.vendor
awt.toolkit
java.vm.info
java.version
java.ext.dirs
sun.boot.class.path
java.vendor
file.separator
java.vendor.url.bug
sun.cpu.endian
sun.io.unicode.encoding
mrj.version
user.region
sun.cpu.isalist
............................

Date format in windowes 7

i have problem with date format in developer 10g and developer 6i
it show date in this format 2011/25/1
it sould be like this 25/1/2011
i put the format mask like dd/mm/yyyy but it showing lik 2011/25/1 this problem only in windowes 7
if i run in windows xp it work fine
how i can reslove this
in xp it work fine

>
i put the format mask like dd/mm/yyyy but it showing lik 2011/25/1 this problem only in windowes 7 Use the formats like this DD/MM/RRRR
Hope this will help you..

Date Format in Visual Studio Query Result Window

Most vendor tools let you change the date format to show datetime in its query results window.
But .NET does not have this.
The ability to change this should be in located in Tools|Options but its not there.
Can it be added in the next release?
ALTER SESSION SET NLS_DATE_FORMAT = 'DD-MON-RR HH:MI:SS' does not work. btw.
.NET and/or ODT over-rides it.

Why would you expect Microsoft to write stuff for an Oracle plugin?! Why on earth would you want to see anything other than the actual raw data that YOU requested in the results of a query? Surely formating/displaying a datetime is a presentation layer thing not a database layer thing! If you're really that bothered re-write your SQL till you get what you want.

Prompt window Issues-resize and date format setting to 'mm/dd/yyyy' .

Guys,
        I have two issues which needs to be solved for better reporting.
        I am using url reporting approach to view reports in ActiveX viewer.
        1) I have to set date format to 'mm/dd/yyyy' in parameter prompt window by default It is in yyyy-mm-dd format.
         2) I have to make prompt window with full size screen in order to accommodate more than one date parameter and make it looks better.
     Can any one tell me how to change and fix date format and resize Prompt window?
      Should I open a ticket with business object in order to solve or customize the Crystal Report Server XI R2 configurations for us?
    Please suggest me some probable options for it.
Sincerely,
Sanjay Patel
Edited by: Adlyd Joseph on Feb 3, 2009 7:22 AM

Hello Adlyd,
SAP Business Objects does not support customizing Infoview, CR Server, or BusinessObjects Enterprise. I'll post the content of SAP Business Objects Note 1218598 below that speaks to this. Even if they could help customize CR Server/Enterprise/Infoview there's no way to change the parameter prompting page. It's a page that is generated at runtime, and it isn't exposed to any of the BusinessObjects SDK.
If you want to see if SAP Business Objects can help you with the date format that might be possible. In North America you can call 1-800-877-2340, and select option 4, and then option 1.
You can also purchase technical support from the [Online Store|http://store.businessobjects.com/store/bobjamer/DisplayProductByTypePage&parentCategoryID=&categoryID=11522300].
Sincerely,
Dan Kelleher
NOTE: This Note was written for BOE XI and XI R2, but it applies to BOE XI 3.0 and 3.1 as well as all versions of CR Server since version XI (v11.0).
++++++++++++++++++
1218598 - Support policy on customizing BusinessObjects InfoView and other applications
Symptom
In previous versions of Business Objects products, Business Objects Customer Support had assisted customers with the customization of the ePortfolio and InfoView applications by providing guidance on what changes were required for simple and specific custom features.
What is the support policy for customizing BusinessObjects XI, XI Release 2, XI 3.0, XI 3.1 InfoView and the other included applications?
Resolution
Starting with BusinessObjects XI, code-level customization of InfoView and the other applications included with BusinessObjects XI is not supported and not recommended. These applications include Crystal Reports Explorer and the Central Management Console.
InfoView is a fully-featured product and can be customized by changing settings in the Central Management Console or by changing values in the application configuration files only.
Requests for custom features in InfoView or any other included applications will be treated either as enhancement requests, or in extreme cases, as product defects. Any feature that does not function as documented will be treated as a product defect.
Custom features may also be implemented as part of an Original Equipment Manufacturer (OEM) agreement, or by engaging Business Objects Consulting Services.
Background Information
Modification of any of the following file types in BusinessObjects InfoView XI, XI Release 2, XI 3.0, XI 3.1 is not supported:
.aspx
.cs
.vb
.ascx
.asax
.jsp
.java
.js
.htm
.html
.csp
See Also
For more information, please refer to the technical paper, [Customizing Look and Feel using the CMC and Style Sheets|https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/209e174d-be3e-2b10-4d8e-e25a76a6fac1].

How can I create a matrix question? Specifically, I need a question in table format that allows each respondent to list a number of events and then data for each event (date, location, number of participants, topics covered, etc.

How can I create a matrix question? Specifically, I need a question in table format that allows each respondent to list a number of events and then data for each event (date, location, number of participants, topics covered, etc.

Hi,
Sorry, we do not support a matrix-question field. Please try the multilines text field (where your participant can enter multiple lines in the input text box) and see if it works for you.
Thanks,
Lucia

Date Format in Windows

Is it possible to get the date format from windows locale setting?
I'm using Java 1.6 and the date format instance for SHORT is not the same as windows locale setting.

Ah, I see now, sorry.
Must admit that I do not know the answer to this question. I always thought that Java assumed a 'standardised default' for each Locale and did not actually take any account of the platforms settings. Also, I do not think that the language exposes this information anywhere; I have not conducted an exhaustive search but cannot find anything in the System and Toolkit classes that would seem to give you access to this setting.
It may be worthwhile searching to see where this setting is exposed throuhg the win32API. That way, you could always write native code to read the setting, access that using JNI and then make use of the setting. That would still leave one problem IMO; what would you do if the user changed the Windows date setting? Alternatively, you could use a ResourecBudnel to parameterise the date string. That would be far easier to implement and allow the user to establish their own (horror) defaults - assuming this is acceptable given the requirements of the application.

Date format in forms and reports in windows 7

i have problem with date format in developer 10g and developer 6i
it show date in this format 2011/25/1
it sould be like this 25/1/2011
how i can reslove this
in xp it work fine

Are you generating Forms and Reports from Oracle Designer, or using Oracle Developer tools directly?
If this is a Forms question, try the Forms forum - Forms
If this is a Reports question, try the Reports forum - Reports
Either way, or with Designer, the problem is probably that you are allowing the date format to default instead of explicitly specifying a date format. Always specify the date format - you want "DD/MM/YYYY".

How Do i create a list that will show in a dropdown box with the list being pulled from another tab and not the cell data format junk?

How Do i create a list that will show in a dropdown box with the list being pulled from another tab and not the cell data format junk?
I currently run OS X 10.10.1
Now i have been trying to work on this for a while now and what i want to do should be simple but its apparently not.
Here is an example of what i want to happen.
I will have 2 tabs: Contact | Sales
Now Contacts will have the list of names and various information about a customer, While Sales will have one drop-down box for each Cell Row that will show the names of the person in tab contacts
for what i am wanting to do i cant use the data format pop-up menu because the list is edited everyday several times a day.
Now how do i do this, Excel can do this so how can numbers do it?

Hi Shegra,
Paste this into a applescript editor window and run it from there. In the script you may need to adjust the four properties to agree with your spreadsheet. Let me know if you have any questions.
quinn
Script starts:
-- This script converts column A in one table into an alphabetized list of popups. It copies the last cell in that column. Then reverts the column to text. It then refreshes popups in column A of a data table starting with a user defined row.
property DataEntrySheet : "Sheet 1" --name of sheet with popups to be refreshed
property DataEntryTable : "Sales" --name of table with popups to be refreshed
set copyRange to {}
property PopValueSheet : "Sheet 1" --name of sheet with popup values table
property PopValueTable : "Contacts" --name of table with popup values
set PopStartRow to {}
tell application "Numbers"
set d to front document
set ps to d's sheet PopValueSheet
set pt to ps's table PopValueTable
set s to d's sheet DataEntrySheet
set t to s's table DataEntryTable
set tf to t's filtered --this records filter setting on data Entry Table
display dialog "Start from row #..." default answer "" with icon 1 -- with icon file "Path:to:my.icon.icns" --a Week # row
set PopStartRow to {text returned of result}
tell pt --convert list to alphabetized popups
set ptRows to count rows
set copyRange to ("A2:" & name of cell ptRows of column "A")
set selection range to range copyRange
set selection range's format to text
sort by column 1 direction ascending
set selection range's format to pop up menu
-- popupsmade
set selection range to cell ptRows of column 1 of pt
set v to value of cell ptRows of pt
end tell
activate application "Numbers"
tell application "System Events" to keystroke "c" using command down
tell pt
set selection range to range copyRange
set selection range's format to text
end tell
tell t
set filtered to false
set tRows to count rows
set pasteRange to ((name of cell PopStartRow of column "A") & ":" & (name of cell tRows of column "A"))
set selection range to range pasteRange
tell application "System Events" to keystroke "v" using command down
set filtered to tf
end tell
end tell

Date format in Master Folder not consistent

Tonight, I found some old cell phone pics from 2 years ago sitting in a folder on my desktop (was never imported to iphoto). So I went ahead and imported them. In iphoto, the newly imported old pics went to the correct locations (amongst the 2009 photos). That's great. But, when I go to those photos and hit "reveal in finder," I notice that the original files have been copied into today's folder, as if the pictures were just taken today. I was hoping they would go into the folders from 2 years ago where they belong. What gives?
Also, I don't know why, but the date format in my Master Folder just got screwy. When I do column view, one column will only have the years. So for 2011, it says I have 24 folders. Of those 24 folders belonging to 2011, 23 of them have actual dates as their name (eg: "July 26, 2011" or "February 16, 2011"). However, one lonely folder simply has "08" (meaning "August"), and when I click on it, it reveals the dates of the month within August 2011 as separate folders, so folders with digits for names indicating the date of import (eg: "18" or "23" or "25"). So those cell phone pics from 2 years ago that I just imported today are showing up in the folder reflecting today's date. Again, what gives???

There is no correlation between the placing of files on the HD and the Events in the iPhoto Window and there hasn't been for three versions of iPhoto now.
There is no support for user acess of the files within the Library Package. It's not designed for that. There's also no need for it. See below for more.
FWIW, current versions of iPhoto use folders based on the date and time of import. Some earlier versions based it on the date and time of the photos. Even earlier versions used date and time of import.
Simple tip: Don't change anything in the iPhoto Library Folder via the Finder or any other application. iPhoto depends on the structure as well as the contents of this folder. Moving things, renaming things,, deleting them or otherwise making changes will prevent iPhoto from working and could even cause you to damage or lose your photos.
There are many, many ways to access your files in iPhoto: You can use any Open / Attach / Browse dialogue. On the left there's a Media heading, your pics can be accessed there. Command-Click for selecting multiple pics.
(Note the above illustration is not a Finder Window. It's the dialogue you get when you go File -> Open)
You can access the Library from the New Message Window in Mail:
There's a similar option in Outlook and many, many other apps. If you use Apple's Mail, Entourage, AOL or Eudora you can email from within iPhoto.
If you use a Cocoa-based Browser such as Safari, you can drag the pics from the iPhoto Window to the Attach window in the browser.
If you want to access the files with iPhoto not running:
For users of 10.6 and later: You can download a free Services component from MacOSXAutomation which will give you access to the iPhoto Library from your Services Menu.
Using the Services Preference Pane you can even create a keyboard shortcut for it.
For Users of 10.4 and 10.5 Create a Media Browser using Automator (takes about 10 seconds) or use this free utility Karelia iMedia Browser
Other options include:
Drag and Drop: Drag a photo from the iPhoto Window to the desktop, there iPhoto will make a full-sized copy of the pic.
File -> Export: Select the files in the iPhoto Window and go File -> Export. The dialogue will give you various options, including altering the format, naming the files and changing the size. Again, producing a copy.
Show File: a. On iPhoto 09 and earlier: Right- (or Control-) Click on a pic and in the resulting dialogue choose 'Show File'. A Finder window will pop open with the file already selected. 3.b.
b: On iPhoto 11 and later: Select one of the affected photos in the iPhoto Window and go File -> Reveal in Finder -> Original. A Finder window will pop open with the file already selected.

Validating JTextField for Date Format

hello,
everybody.
i am trying to perform a validation on text field, i.e if the input is in a date format then it will show, other wise it will consume the character.
please help me out of this problem i am stucked with it.
waitng for reply. the following is my code.
import javax.swing.*;
import java.awt.event.*;
import java.awt.*;
import java.util.*;
import java.text.*;
public class RilJDateField implements KeyListener
     JFrame frame;
     JPanel panel;
     JLabel label;
     JTextField text;
     GridBagLayout gl;
     GridBagConstraints gbc;
     Date date = new Date();
     public static void main(String a[])
          new RilJDateField();
     public RilJDateField()
          panel = new JPanel();
          gl = new GridBagLayout();
          gbc = new GridBagConstraints();
          panel.setLayout(gl);
          label = new JLabel("Only Date Format");
          text = new JTextField(5);
          gbc.anchor = GridBagConstraints.NORTHWEST;
          gbc.gridx = 1;
          gbc.gridy = 1;
          gl.setConstraints(label,gbc);
          gbc.anchor = GridBagConstraints.NORTHWEST;
          gbc.gridx = 2;
          gbc.gridy = 1;
          gl.setConstraints(text,gbc);
          panel.add(label);
          panel.add(text);
          text.addKeyListener(this);
          text.requestFocus();
          frame = new JFrame("RilJDateField Demo");
          frame.getContentPane().add(panel);
          frame.addWindowListener(new WindowAdapter() {
                    public void windowClosing(WindowEvent we)
                         System.exit(0);
          frame.setSize(300,300);
          frame.setVisible(true);
     public void keyTyped(KeyEvent ke)
     public void keyPressed(KeyEvent ke)
          DateFormat df;
          df = DateFormat.getDateInstance();
          df = (DateFormat) ke.getSource();
          if(!(df.equals(date)))
               ke.consume();
     public void keyReleased(KeyEvent ke)
}

hi,
thanks very much, u gave me great idea.
according to ur suggestion i used JFormattedTextField as well as SimpleDateFormat, but while giving keyevent i am getting the error,
so please if possible reply for this.
the error is
java.lang.ClassCastException
     at RilJDateField.keyTyped(RilJDateField.java:61)
     at java.awt.Component.processKeyEvent(Unknown Source)
     at javax.swing.JComponent.processKeyEvent(Unknown Source)
     at java.awt.Component.processEvent(Unknown Source)
     at java.awt.Container.processEvent(Unknown Source)
     at java.awt.Component.dispatchEventImpl(Unknown Source)
     at java.awt.Container.dispatchEventImpl(Unknown Source)
     at java.awt.Component.dispatchEvent(Unknown Source)
     at java.awt.KeyboardFocusManager.redispatchEvent(Unknown Source)
     at java.awt.DefaultKeyboardFocusManager.dispatchKeyEvent(Unknown Source)
     at java.awt.DefaultKeyboardFocusManager.preDispatchKeyEvent(Unknown Source)
     at java.awt.DefaultKeyboardFocusManager.typeAheadAssertions(Unknown Source)
     at java.awt.DefaultKeyboardFocusManager.dispatchEvent(Unknown Source)
     at java.awt.Component.dispatchEventImpl(Unknown Source)
     at java.awt.Container.dispatchEventImpl(Unknown Source)
     at java.awt.Window.dispatchEventImpl(Unknown Source)
     at java.awt.Component.dispatchEvent(Unknown Source)
     at java.awt.EventQueue.dispatchEvent(Unknown Source)
     at java.awt.EventDispatchThread.pumpOneEventForHierarchy(Unknown Source)
     at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)
     at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
     at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
     at java.awt.EventDispatchThread.run(Unknown Source)and my source code is
import javax.swing.*;
import java.awt.event.*;
import java.awt.*;
import java.util.*;
import java.text.*;
public class RilJDateField implements KeyListener
     JFrame frame;
     JPanel panel;
     JLabel label;
     JFormattedTextField text;
     GridBagLayout gl;
     GridBagConstraints gbc;
     Date date = new Date();
     SimpleDateFormat formatter;
     public static void main(String a[])
          new RilJDateField();
     public RilJDateField()
          panel = new JPanel();
          gl = new GridBagLayout();
          gbc = new GridBagConstraints();
          panel.setLayout(gl);
          label = new JLabel("Only Date Format");
          text = new JFormattedTextField();
          text.setColumns(10);
          formatter = new SimpleDateFormat("dd mm yyyy");
          gbc.anchor = GridBagConstraints.NORTHWEST;
          gbc.gridx = 1;
          gbc.gridy = 1;
          gl.setConstraints(label,gbc);
          gbc.anchor = GridBagConstraints.NORTHWEST;
          gbc.gridx = 2;
          gbc.gridy = 1;
          gl.setConstraints(text,gbc);
          panel.add(label);
          panel.add(text);
          text.addKeyListener(this);
          text.requestFocus();
          frame = new JFrame("RilJDateField Demo");
          frame.getContentPane().add(panel);
          frame.addWindowListener(new WindowAdapter() {
                    public void windowClosing(WindowEvent we)
                         System.exit(0);
          frame.setSize(300,300);
          frame.setVisible(true);
     public void keyTyped(KeyEvent ke)
          Date date = (Date) ke.getSource();
          if(!(date.equals(formatter)))
               ke.consume();
     public void keyPressed(KeyEvent ke)
     public void keyReleased(KeyEvent ke)
}

Lots of Anyconnect Error Message in Windows Event Log

Hi Community.
We have lots of Anyconnect Error Messages in the Windows Event Log. Following two examples.
Can anyone tell me why these errors appears and how do I fix them ? I already installed the newest Anyconnect on my machine.
Thanks in advance and Kind Regards Patrick
Example 1
<Provider Name="acvpnagent" />
<EventID Qualifiers="9216">2</EventID>
<Keywords>0x80000000000000</Keywords>
<EventRecordID>97564</EventRecordID>
<Channel>Cisco AnyConnect Secure Mobility Client</Channel>
- <EventData>
<Data>Function: CNetEnvironment::logProbeFailure File: .\NetEnvironment.cpp Line: 1432 Invoked Function: CHttpProbeAsync::SendProbe Return Code: -27066354 (0xFE63000E) Description: HTTP_PROBE_ASYNC_ERROR_CANNOT_CONNECT HTTP (host: 109.164.211.237)</Data>
</EventData>
Example 2
<Provider Name="acvpnagent" />
<EventID Qualifiers="9216">2</EventID>
<Keywords>0x80000000000000</Keywords>
<EventRecordID>97565</EventRecordID>
<Channel>Cisco AnyConnect Secure Mobility Client</Channel>
- <EventData>
<Data>Function: CNetEnvironment::TestAccessToSG File: .\NetEnvironment.cpp Line: 1385 Invoked Function: CNetEnvironment::analyzeHttpResponse Return Code: -28966899 (0xFE46000D) Description: NETENVIRONMENT_ERROR_PROBE_INCOMPLETE:Network Probe could not contact target</Data>
</EventData>

HI and welcome to Discussions,
in my personal opinion there is not much for you to worry about.
The 'Windows Tool for the elimination of malware' is nothing you miss as long as you have a decent Anti-Virus Software running.
The update for the IE 7 might be missing an installed IE 7, which can do by downloading it yourself from Microsofts webpage.
If you don't use the IE but something like Firefox or Opera or Safari, than don't bother with these update.
Stefan

How to write to windows event logs from determinations-server under IIS

This is just an FYI technical bit of information I wish someone had shared with me before I started trying to write OPA errors to the windows event log... Most problems writing to the windows event log from log4net occur because of permissions. Some problems are because determinations-server does not have permissions to create some registry entries. Some problems cannot be resolved unless specific registry entry permissions are actually changed. We had very little consistency with the needed changes across our servers, but some combination of the following would always get the logging to the windows event log working.
To see log4net errors as log4net attempts to utilize the windows event log, temporarily add the following to the web.config:
<appSettings>

<add key="log4net.Internal.Debug" value="true"/>
</appSettings>
<system.diagnostics>
<trace autoflush="true">
<listeners>
<add
name="textWriterTraceListener"
type="System.Diagnostics.TextWriterTraceListener"
initializeData="logs/InfoDSLog.txt" />
</listeners>
</trace>
</system.diagnostics>
To add an appender for the windows event viewer, try the following in the log4net.xml:
<appender name="EventLogAppender" type="log4net.Appender.EventLogAppender" >
<param name="ApplicationName" value="OPA" />
<param name="LogName" value="OPA" />
<param name="Threshold" value="all" />
<layout type="log4net.Layout.PatternLayout">
<conversionPattern value="%date [%thread] %-5level %logger [%property{NDC}] - %message%newline" />
</layout>
<filter type="log4net.Filter.LevelRangeFilter">
<levelMin value="WARN" />
<levelMax value="FATAL" />
</filter>
</appender>
<root>
<level value="warn"/>
<appender-ref ref="EventLogAppender"/>
</root>
To put the OPA logs under the Application Event Log group, try this:
Create an event source under the Application event log in Registry Editor. To do this, follow these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application
4.     Right-click the Application subkey, point to New, and then click Key.
5.     Type OPA for the key name.
6.     Close Registry Editor.
To put the OPA logs under a custom OPA Event Log group (as in the demo appender above), try this:
Create an event log in Registry Editor. To do this, follow these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
4.     Right-click the eventlog subkey, point to New, and then click Key.
5.     Type OPA for the key name.
6.     Right-click the new OPA key and add a new DWORD called "MaxSize" and set it to "1400000" which is about 20 Meg in order to keep the log file from getting too large.
7.     The next steps either help or sometimes cause an error, but you can try these next few steps... If you get an error about a source already existing, then you can delete the key.
8.     Right-click the OPA subkey, point to New, and then click Key.
9.     Type OPA for the key name.
10.     Close Registry Editor.
You might need to change permissions so OPA can write to the event log in Registry Editor. If you get permission errors, try following these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
4.     Right-click the EventLog key, select Permissions.
5.     In the dialog that pops up, click Add...
6.     Click Advanced...
7.     Click Locations... and select the current machine by name.
8.     Click Find Now
9.     Select both the Network user and IIS_IUSERS user and click OK and OK again. (We never did figure out which of those two users was the one that fixed our permission problem.)
10.     Change the Network user to have Full Control
11.     Click Apply and OK
To verify OPA Logging to the windows event logs from Determinations-Server:
Go to the IIS determinations-server application within Server Manager.
Under Manage Application -> Browse Application click the http link to pull up the local "Available Services" web page that show the wsdl endpoints.
Select the /determinations-server/server/soap.asmx?wsdl link
Go to the URL and remove the "?wsdl" from the end of the url and refresh. This will throw the following error into the logs:
ERROR Oracle.Determinations.Server.DSServlet [(null)] - Invalid get request: /determinations-server/server/soap.asmx
That error should show up in the windows event log, OR you can get a message explaining why security stopped you in "logs/InfoDSLog.txt" if you used the web.config settings from above.
http://msdn.microsoft.com/en-us/library/windows/desktop/aa363648(v=vs.85).aspx
Edited by: Paul Fowler on Feb 21, 2013 9:45 AM

Thanks for sharing this information Paul.

Windows event data format

Similar Messages

Maybe you are looking for