We are currently exporting the Windows event logs from several of our Win2K servers to a SQL table and I would like to be able to query the description field (which has been converted to a string field in SQL) to look for certain elements here is an example:
Document 95 Microsoft Word - compliance program - J - Excluded Individuals- final.doc owned by trichard was printed on LJ32 via port IP_192.168.11.227. Size in bytes: 71717; pages printed: 1
I'm making the assumption that the only way to query it would be to use a wildcard. How would I set up my query to say query for all instances of a document printer on LJ32 (our printer naming scheme)?.
Also is it possible to build this query with a parameter so that it doesn't have to be manually edited each time the query changes?
Document 95 Microsoft Word - compliance program - J - Excluded Individuals- final.doc owned by trichard was printed on LJ32 via port IP_192.168.11.227. Size in bytes: 71717; pages printed: 1
I'm making the assumption that the only way to query it would be to use a wildcard. How would I set up my query to say query for all instances of a document printer on LJ32 (our printer naming scheme)?.
Also is it possible to build this query with a parameter so that it doesn't have to be manually edited each time the query changes?