When you look at these logs with your event viewer in Windows, are the users that violated the quotas showing up in the username column, or does it say N/A?
Scott Campbell Senior Software Developer Somix Technologies http://www.somix.com -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, March 04, 2003 11:51 AM To: [EMAIL PROTECTED] Subject: Getting user from Win32::EventLog Can anyone tell me if I'm needlessly beating my head against the wall trying to get the user field from a W2K event log? I've been using EventLog successfully for a year or so. But now I have a need to see which users are going over their quota on a W2K server. The event log shows this with ids of 36 and 37. But the message is only "A user has gone over his limit." This is useless to me unless I can also see which user this is. The Event Viewer has a user field but EventLog doesn't. I did search the archive and found some information on splitting the Strings field by \x00. But when I do that I only get the letter E, I think for the drive where the quota is being exceeded. Since I'm finally convincing the died-in-the-wool Windows users that they really need Perl to intelligently automate things I'd like to show them that this works. In fact they've asked me to solve it because my other EventLog scripts have worked. But it's beginning to look like I'm going to have to let them down. Please don't let that happen and send me some advice. Thanks much, Ken _______________________________________________ Perl-Win32-Admin mailing list [EMAIL PROTECTED] To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs _______________________________________________ Perl-Win32-Admin mailing list [EMAIL PROTECTED] To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs
