{"id":476,"date":"2021-09-29T19:05:37","date_gmt":"2021-09-29T19:05:37","guid":{"rendered":"https:\/\/eventlogxp.com\/blog\/?p=476"},"modified":"2021-09-29T19:47:42","modified_gmt":"2021-09-29T19:47:42","slug":"case-study-a-new-way-to-get-regular-reports-about-the-problems","status":"publish","type":"post","link":"https:\/\/eventlogxp.com\/blog\/case-study-a-new-way-to-get-regular-reports-about-the-problems\/","title":{"rendered":"Case study \u2013 A new way to get regular reports about the problems."},"content":{"rendered":"\n<p>Several years ago, I wrote an article about generating weekly reports about network issues. The main drawback of that method was the requirement to have Event Log Explorer running all the time (or at least running by the time when the scheduled task should be started). &nbsp;Since that time, we released new versions and editions of Event Log Explorer and now we can get the same result in a smarter way.<\/p>\n\n\n\n<p>Let&#8217;s take the same task \u2013 getting reports about non-informational events in Application and System logs from different servers.&nbsp;<\/p>\n\n\n\n<p>First, you need to install Event Log Explorer Enterprise Edition since Logexport utility is not available in Standard Edition.<\/p>\n\n\n\n<p>After running Event Log Explorer, we should create a task which collects all non-informational events for the last 7 days. We can make this task from scratch, but we have template for this task (Admin events).<\/p>\n\n\n\n<p>In the Objects tree browse for Task templates->Administrative and double click on Admin events.<\/p>\n\n\n\n<figure class=\"wp-block-image size-medium\"><a href=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/TempaltesInTree.png\" data-rel=\"lightbox-gallery-4qWHyGCE\" data-rl_title=\"\" data-rl_caption=\"\" title=\"\"><img loading=\"lazy\" width=\"300\" height=\"261\" src=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/TempaltesInTree-300x261.png\" alt=\"\" class=\"wp-image-479\" srcset=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/TempaltesInTree-300x261.png 300w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/TempaltesInTree.png 509w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/figure>\n\n\n\n<p>Create task from template window will appear.<\/p>\n\n\n\n<figure class=\"wp-block-image size-medium\"><a href=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/image.png\" data-rel=\"lightbox-gallery-4qWHyGCE\" data-rl_title=\"\" data-rl_caption=\"\" title=\"\"><img loading=\"lazy\" width=\"300\" height=\"239\" src=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/image-300x239.png\" alt=\"\" class=\"wp-image-482\" srcset=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/image-300x239.png 300w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/image.png 624w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/figure>\n\n\n\n<p>You can change the task name and task folder, but I will leave the default values.<\/p>\n\n\n\n<p>Click Next and on Computer tab add your servers to the list<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/image-1.png\" data-rel=\"lightbox-gallery-4qWHyGCE\" data-rl_title=\"\" data-rl_caption=\"\" title=\"\"><img loading=\"lazy\" width=\"467\" height=\"301\" src=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/image-1.png\" alt=\"\" class=\"wp-image-484\" srcset=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/image-1.png 467w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/image-1-300x193.png 300w\" sizes=\"(max-width: 467px) 100vw, 467px\" \/><\/a><\/figure>\n\n\n\n<p>I will add only 2 servers, you can add any number of them.<\/p>\n\n\n\n<p>You can optionally click Test connectivity button to check if the servers are accessible.<\/p>\n\n\n\n<p>Click Next to proceed to the Logs page. Application and System logs are already in the list, but you can add extra logs. Click Next to proceed to the Filter page.<\/p>\n\n\n\n<figure class=\"wp-block-image size-medium\"><a href=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/image-2.png\" data-rel=\"lightbox-gallery-4qWHyGCE\" data-rl_title=\"\" data-rl_caption=\"\" title=\"\"><img loading=\"lazy\" width=\"300\" height=\"214\" src=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/image-2-300x214.png\" alt=\"\" class=\"wp-image-485\" srcset=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/image-2-300x214.png 300w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/image-2.png 624w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/figure>\n\n\n\n<p>I will not change the filter setting taken from template, but you can modify them as you wish (e.g. change time interval to 1 day or exclude Waring events).<\/p>\n\n\n\n<p>Click Next to review the column settings and then click Next again for the last step.<\/p>\n\n\n\n<p>Now you should export your task into a file.<\/p>\n\n\n\n<p>Consider that you have C:\\Tasks folder for the task and exported documents, click Save button to save your task as &#8220;C:\\Tasks\\Admin Events.xml&#8221;.<\/p>\n\n\n\n<p>Click Finish button \u2013 this will also create the task in the Objects tree.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/image-3.png\" data-rel=\"lightbox-gallery-4qWHyGCE\" data-rl_title=\"\" data-rl_caption=\"\" title=\"\"><img loading=\"lazy\" width=\"288\" height=\"283\" src=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/image-3.png\" alt=\"\" class=\"wp-image-486\"\/><\/a><\/figure>\n\n\n\n<p>Doubleclick on the task in the tree to review the events.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><a href=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/LogView-Task.png\" data-rel=\"lightbox-gallery-4qWHyGCE\" data-rl_title=\"\" data-rl_caption=\"\" title=\"\"><img loading=\"lazy\" src=\"http:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/LogView-Task.png\" alt=\"\" class=\"wp-image-490\" width=\"624\" height=\"553\"\/><\/a><\/figure>\n\n\n\n<p>Open Command Prompt (or Windows Power Shell) and export task events to Excel<\/p>\n\n\n\n<p>Type<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code><code><kbd>\"C:\\Program Files (x86)\\Event Log Explorer\\logexport.exe\" \/TASK:\"C:\\Task\\Admin Events.xml\" \/TARGET:EXCEL \/TDIR:\"C:\\Tasks\"<\/kbd><\/code><\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><a href=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/logexport_task.png\" data-rel=\"lightbox-gallery-4qWHyGCE\" data-rl_title=\"\" data-rl_caption=\"\" title=\"\"><img loading=\"lazy\" src=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/logexport_task.png\" alt=\"\" class=\"wp-image-497\" width=\"662\" height=\"449\" srcset=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/logexport_task.png 882w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/logexport_task-300x203.png 300w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/logexport_task-768x521.png 768w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/logexport_task-660x447.png 660w\" sizes=\"(max-width: 662px) 100vw, 662px\" \/><\/a><\/figure>\n\n\n\n<p>Open the Excel document in C:\\Tasks folder and make sure that it&#8217;s correct.<\/p>\n\n\n\n<p>Now we can schedule the task.<\/p>\n\n\n\n<p>E.g. to start it every Monday at 7:00 AM type this command:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>SCHTASKS \/Create \/TN \"Event Log Explorer Tasks\\TaskAdminEvents_Export\" \u00a0\/TR \"'C:\\Program Files (x86)\\Event Log Explorer\\logexport.exe' \/FORMAT:Excel \/Task:'C:\\Tasks\\Admin Events.xml' \/TDir:'C:\\Tasks'\" \/SC Weekly \/D Mon \/ST 08:00 \/RU Michael \/RP *********<\/code><\/pre>\n\n\n\n<p>That&#8217;s it, the task is scheduled to 8:00 every Monday. You can use Windows Task Scheduler to modify or verify the task.<\/p>\n\n\n\n<p>It is important to specify the username and password using \/RU and \/RP parameters since the task should be started even if no user logged on your OC. Alternatively you can start the task under System account, but provide the credentials as command-line parameters for logexport.exe. In this case you can use the following command to create the task:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>SCHTASKS \/Create \/TN \"Event Log Explorer Tasks\\TaskAdminEvents_Export\" \u00a0\/TR \"'C:\\Program Files (x86)\\Event Log Explorer\\logexport.exe' \/FORMAT:Excel \/Task:'C:\\Tasks\\Admin Events.xml' \/TDir:'C:\\Tasks' \/User:FSPro\\Michael \/Password:**********\" \/SC Weekly \/D Mon \/ST 08:00 \/RU System<\/code><\/pre>\n\n\n\n<p>Note that since you scheduled the task to start under the System account, you should run this command elevated (start Command Prompt or PowerShell as Admin).<\/p>\n\n\n\n<p>Now you can run the task e.g. using Task Scheduler to make sure that it works correctly.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><a href=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/EventLogTask-Scheduler.png\" data-rel=\"lightbox-gallery-4qWHyGCE\" data-rl_title=\"\" data-rl_caption=\"\" title=\"\"><img loading=\"lazy\" src=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/EventLogTask-Scheduler-1024x637.png\" alt=\"\" class=\"wp-image-499\" width=\"768\" height=\"478\" srcset=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/EventLogTask-Scheduler-1024x637.png 1024w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/EventLogTask-Scheduler-300x187.png 300w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/EventLogTask-Scheduler-768x478.png 768w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/EventLogTask-Scheduler-660x410.png 660w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2021\/09\/EventLogTask-Scheduler.png 1039w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/><\/a><\/figure>\n\n\n\n<p><a href=\"https:\/\/eventlogxp.com\/download.php\" target=\"_blank\" rel=\"noreferrer noopener\">Download Event Log Explorer<\/a>\u00a0right now to build scheduled reports about problems in your network!<\/p>\n<a class=\"synved-social-button synved-social-button-share synved-social-size-24 synved-social-resolution-single synved-social-provider-facebook nolightbox\" data-provider=\"facebook\" target=\"_blank\" rel=\"nofollow\" title=\"Share on Facebook\" href=\"https:\/\/www.facebook.com\/sharer.php?u=https%3A%2F%2Feventlogxp.com%2Fblog%2Fwp-json%2Fwp%2Fv2%2Fposts%2F476&#038;t=Case%20study%20%E2%80%93%20A%20new%20way%20to%20get%20regular%20reports%20about%20the%20problems.&#038;s=100&#038;p&#091;url&#093;=https%3A%2F%2Feventlogxp.com%2Fblog%2Fwp-json%2Fwp%2Fv2%2Fposts%2F476&#038;p&#091;images&#093;&#091;0&#093;=https%3A%2F%2Feventlogxp.com%2Fblog%2Fwp-content%2Fuploads%2F2021%2F09%2Fbusiness-report.png&#038;p&#091;title&#093;=Case%20study%20%E2%80%93%20A%20new%20way%20to%20get%20regular%20reports%20about%20the%20problems.\" style=\"font-size: 0px;width:24px;height:24px;margin:0;margin-bottom:5px;margin-right:5px\"><img alt=\"Facebook\" title=\"Share on Facebook\" class=\"synved-share-image synved-social-image synved-social-image-share\" width=\"24\" height=\"24\" style=\"display: inline;width:24px;height:24px;margin: 0;padding: 0;border: none\" src=\"https:\/\/eventlogxp.com\/blog\/wp-content\/plugins\/social-media-feather\/synved-social\/image\/social\/regular\/48x48\/facebook.png\" \/><\/a><a class=\"synved-social-button synved-social-button-share synved-social-size-24 synved-social-resolution-single synved-social-provider-twitter nolightbox\" data-provider=\"twitter\" target=\"_blank\" rel=\"nofollow\" title=\"Share on Twitter\" href=\"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Feventlogxp.com%2Fblog%2Fwp-json%2Fwp%2Fv2%2Fposts%2F476&#038;text=Check%20this%20Event%20Log%20Explorer%20blog%20post\" style=\"font-size: 0px;width:24px;height:24px;margin:0;margin-bottom:5px;margin-right:5px\"><img alt=\"twitter\" title=\"Share on Twitter\" class=\"synved-share-image synved-social-image synved-social-image-share\" width=\"24\" height=\"24\" style=\"display: inline;width:24px;height:24px;margin: 0;padding: 0;border: none\" src=\"https:\/\/eventlogxp.com\/blog\/wp-content\/plugins\/social-media-feather\/synved-social\/image\/social\/regular\/48x48\/twitter.png\" \/><\/a><a class=\"synved-social-button synved-social-button-share synved-social-size-24 synved-social-resolution-single synved-social-provider-reddit nolightbox\" data-provider=\"reddit\" target=\"_blank\" rel=\"nofollow\" title=\"Share on Reddit\" href=\"https:\/\/www.reddit.com\/submit?url=https%3A%2F%2Feventlogxp.com%2Fblog%2Fwp-json%2Fwp%2Fv2%2Fposts%2F476&#038;title=Case%20study%20%E2%80%93%20A%20new%20way%20to%20get%20regular%20reports%20about%20the%20problems.\" style=\"font-size: 0px;width:24px;height:24px;margin:0;margin-bottom:5px;margin-right:5px\"><img alt=\"reddit\" title=\"Share on Reddit\" class=\"synved-share-image synved-social-image synved-social-image-share\" width=\"24\" height=\"24\" style=\"display: inline;width:24px;height:24px;margin: 0;padding: 0;border: none\" src=\"https:\/\/eventlogxp.com\/blog\/wp-content\/plugins\/social-media-feather\/synved-social\/image\/social\/regular\/48x48\/reddit.png\" \/><\/a><a class=\"synved-social-button synved-social-button-share synved-social-size-24 synved-social-resolution-single synved-social-provider-pinterest nolightbox\" data-provider=\"pinterest\" target=\"_blank\" rel=\"nofollow\" title=\"Pin it with Pinterest\" href=\"https:\/\/pinterest.com\/pin\/create\/button\/?url=https%3A%2F%2Feventlogxp.com%2Fblog%2Fwp-json%2Fwp%2Fv2%2Fposts%2F476&#038;media=https%3A%2F%2Feventlogxp.com%2Fblog%2Fwp-content%2Fuploads%2F2021%2F09%2Fbusiness-report.png&#038;description=Case%20study%20%E2%80%93%20A%20new%20way%20to%20get%20regular%20reports%20about%20the%20problems.\" style=\"font-size: 0px;width:24px;height:24px;margin:0;margin-bottom:5px;margin-right:5px\"><img alt=\"pinterest\" title=\"Pin it with Pinterest\" class=\"synved-share-image synved-social-image synved-social-image-share\" width=\"24\" height=\"24\" style=\"display: inline;width:24px;height:24px;margin: 0;padding: 0;border: none\" src=\"https:\/\/eventlogxp.com\/blog\/wp-content\/plugins\/social-media-feather\/synved-social\/image\/social\/regular\/48x48\/pinterest.png\" \/><\/a><a class=\"synved-social-button synved-social-button-share synved-social-size-24 synved-social-resolution-single synved-social-provider-linkedin nolightbox\" data-provider=\"linkedin\" target=\"_blank\" rel=\"nofollow\" title=\"Share on Linkedin\" href=\"https:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https%3A%2F%2Feventlogxp.com%2Fblog%2Fwp-json%2Fwp%2Fv2%2Fposts%2F476&#038;title=Case%20study%20%E2%80%93%20A%20new%20way%20to%20get%20regular%20reports%20about%20the%20problems.\" style=\"font-size: 0px;width:24px;height:24px;margin:0;margin-bottom:5px;margin-right:5px\"><img alt=\"linkedin\" title=\"Share on Linkedin\" class=\"synved-share-image synved-social-image synved-social-image-share\" width=\"24\" height=\"24\" style=\"display: inline;width:24px;height:24px;margin: 0;padding: 0;border: none\" src=\"https:\/\/eventlogxp.com\/blog\/wp-content\/plugins\/social-media-feather\/synved-social\/image\/social\/regular\/48x48\/linkedin.png\" \/><\/a><a class=\"synved-social-button synved-social-button-share synved-social-size-24 synved-social-resolution-single synved-social-provider-mail nolightbox\" data-provider=\"mail\" rel=\"nofollow\" title=\"Share by email\" href=\"mailto:?subject=Case%20study%20%E2%80%93%20A%20new%20way%20to%20get%20regular%20reports%20about%20the%20problems.&#038;body=Check%20this%20Event%20Log%20Explorer%20blog%20post:%20https%3A%2F%2Feventlogxp.com%2Fblog%2Fwp-json%2Fwp%2Fv2%2Fposts%2F476\" style=\"font-size: 0px;width:24px;height:24px;margin:0;margin-bottom:5px\"><img alt=\"mail\" title=\"Share by email\" class=\"synved-share-image synved-social-image synved-social-image-share\" width=\"24\" height=\"24\" style=\"display: inline;width:24px;height:24px;margin: 0;padding: 0;border: none\" src=\"https:\/\/eventlogxp.com\/blog\/wp-content\/plugins\/social-media-feather\/synved-social\/image\/social\/regular\/48x48\/mail.png\" \/><\/a>","protected":false},"excerpt":{"rendered":"<p>Several years ago, I wrote an article about generating weekly reports about network issues. The main drawback of that method was the requirement to have Event Log Explorer running all the time (or at least running by the time when the scheduled task should be started). &nbsp;Since that time, we released new versions and editions of Event Log Explorer and now we can get the\u2026 <span class=\"read-more\"><a href=\"https:\/\/eventlogxp.com\/blog\/case-study-a-new-way-to-get-regular-reports-about-the-problems\/\">Read More &raquo;<\/a><\/span><\/p>\n","protected":false},"author":2,"featured_media":503,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[7],"tags":[56,53,73],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/posts\/476"}],"collection":[{"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/comments?post=476"}],"version-history":[{"count":13,"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/posts\/476\/revisions"}],"predecessor-version":[{"id":502,"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/posts\/476\/revisions\/502"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/media\/503"}],"wp:attachment":[{"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/media?parent=476"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/categories?post=476"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/tags?post=476"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}