MonitorMagic - Tools4Ever.com

Using MonitorMagic
Distribution of event types per machine shows how many errors, warning and info
messages are in the eventlogs of various computers, ordered by eventlogtype.
SELECT logeventtype,computername,count(*)As 'number of events'
FROM mmgeneral_computername,mmlog_eventrecord,mmlog_description,
mmlog_sourceName,mmlog_logname
WHERE mmlog_eventrecord.logsourceid=mmlog_sourcename.sourceid
AND mmlog_eventrecord.loglogid=mmlog_logname.logid
AND mmlog_eventrecord.logdescriptionid=mmlog_description.descriptionid
AND mmlog_logname.logid=mmlog_eventrecord.loglogid
AND mmgeneral_computername.computerid=mmlog_eventrecord.logcomputerid
group by ALL logeventtype, Computername
order by logeventtype,computername
Distribution of event types per machine and per eventsource
SELECT sourcename,logeventtype,computername,count(*)As 'number of events'
FROM
mmgeneral_computername,mmlog_eventrecord,mmlog_description,mmlog_sourceName,mmlog
_logname
WHERE mmlog_eventrecord.logsourceid=mmlog_sourcename.sourceid
AND mmlog_eventrecord.loglogid=mmlog_logname.logid
AND mmlog_eventrecord.logdescriptionid=mmlog_description.descriptionid
AND mmlog_logname.logid=mmlog_eventrecord.loglogid
AND mmgeneral_computername.computerid=mmlog_eventrecord.logcomputerid
GROUP BY logeventtype,sourcename,Computername
ORDER BY sourcename,logeventtype,computername
Select all info of a certain computer from a certain time period, and a certain eventlog
SELECT sourcename,logname,computername,description,
LogEventRecordid,logtimeGenerated,logeventid,logeventtype,logeventcategory
FROM mmlog_eventrecord,mmlog_Description,mmlog_sourceName,
mmlog_logname,mmgeneral_computername
WHERE mmlog_eventrecord.logsourceid=mmlog_sourcename.sourceid
AND mmlog_eventrecord.logdescriptionid=mmlog_description.descriptionid
AND mmlog_logname.logid=mmlog_eventrecord.loglogid
AND mmgeneral_computername.computerid=mmlog_eventrecord.logcomputerid
AND mmgeneral_computername.computername='Pacific'
AND mmLog_logname.logname='system'
AND mmlog_eventrecord.LogTimeGenerated >'11/20/2002 9:00:00'
AND mmlog_eventrecord.LogTimeGenerated