如何在 Python 中从 Windows Server 的“应用程序和服务日志”中读取 TaskScheduler 日志

Question

How can I read (in Python) the logs from Windows Server 2008:

    Event Viewer
      Application and Services Logs
         Microsoft
            Windows
               Task Scheduler
                  Operational

Thanks,

Answer 1

I don't know how you would do it with Python without tapping out to some sort of C/C++ support?

But, then I thought, maybe you could shell from python, and use LogParser ? Logparser can return nicely formatted output you could easily shred in python. However, if LogParser supports searching the extended log files, I couldn't get it to work on my Windows Server 2008 R2 server.

But, then I thought, well, you could maybe tap out to PowerShell, surely? However, not using the get-eventlog cmdlet like I had thought would be the answer.

Ultimately, I was able to query the event records of the log file "Microsoft-Windows-TaskScheduler/Operational", but I had to tap out to C# to do it from PowerShell.

To sum up this sad story:

• use whatever C/C++ extension support python has built in to call new Windows Event Log functions
• use custom .net ( EventLogQuery / EventLogReader ) code to ETL from event log format into something python can natively consume

See Event Queries and Event Xml for samples on how to construct the query.