|
Try “&”ing your value with 0xffff, like this:
$event_id= $EventData->{'EventID'} & 0xffff;
This should fix your problem that you are seeing.
Scott Campbell Senior Software Developer Somix Technologies http://www.somix.com
-----Original Message-----
I am reading Event logs from a Windows XP PC, and the ID shown in my Perl script is very different than the ID listed by Microsoft or shown in their GUI tool. For example, when I look for event ID 1704, my perl script reports the ID as 1073743528; similarly, event ID 1054 is reported by Perl as -1073740770. Any ideas on why this is happening or how I can map the Perl numbers back to the original Microsoft ID?
Thanks.
-Ken Foster
|
- Weird event log ids Foster, Ken
- RE: Weird event log ids Scott Campbell
- RE: Weird event log ids Foster, Ken
- RE: Weird event log ids Martin, Greg \(CSC\)
- RE: Weird event log ids Scott Campbell
