My environment has about a dozen windows boxes (mostly VMs), but only two are running robots.I know that ntevl is a local probe, but I'd like to have a method of reading Event Logs from other boxes through one of my robots that is running ntevl.
I was hoping to tap into this functionality: http://technet.microsoft.com/en-us/library/cc766438.aspx - but that might not work. This all depends on where ntevl hooks into, and where the remote log reading hooks into the remote logs. Additionally, whichever method is used, I should be able to to distinguish the source of the message using one of the standard ntevl-read fields.
Anyone have ideas on how to make this work?
**edit: moved to correct forum