> So I was looking at a 2k3 log file.. and I did it on my test Vista > laptop... and I know and understand that Vista has new event > IDs... so > I'm cool with that.. what I didn't realize is that apparently I can't > use the Vista MS Event viewer to open up 2k3/XP log files and review > what's going on... that even such events as 529 have lost information. > > 1. Is my conclusion correct? > 2. What are the gurus of log viewing doing to be able to > read logs from > xp,2k3,Vista and ultimately Longhorn without firing up each platform? Oh NO. I'm not surprised you're more up on changes in Vista than I am, Susan. For years one of my *favorite* parts of Microsoft logging is that event IDs *have* remained consistent across versions of the operating systems... ***tears hair out*** Eric Fitzgerald, where are you? What's the plan for heterogeneous Windows environments? tbird _______________________________________________ LogAnalysis mailing list LogAnalysis@private http://lists.shmoo.com/mailman/listinfo/loganalysis
This archive was generated by hypermail 2.1.3 : Sun Jan 07 2007 - 16:32:09 PST