Privacy Policy

vrock
  • vrock
  • Newbie Topic Starter
2011-01-26T16:17:39Z
Just found your site...Great program! I have installed it on a couple of test computers and it works great. But on one computer (Windows XP) it logs the syslogs to file perfectly but it will not log to the Application log. I have uninstalled several times but it will not log to the Application Log. Is there anything else I should check?

Thanks

Vince
franzk
2011-01-26T21:13:15Z
Vince,

all I can think of is that the during install (sl4nt.exe -i) registration of the Event log source fails. Is there any error displayed in the console window when you install it?

-Franz
vrock
  • vrock
  • Newbie Topic Starter
2011-01-26T21:22:43Z
Nothing at all! Everything says successful but alerts never make it to the Application log
franzk
2011-01-26T23:26:03Z
You could try to stop the service (which should run as LocalSystem) and start the program in your user context (must be an administrator) on the console by executing:

SL4NT.exe -d

Then check out if writing to the Event Log works or not.

-Franz
vrock
  • vrock
  • Newbie Topic Starter
2011-01-27T15:15:39Z
Thanks Franz! I tried that and same symptoms. Is there any way to re-register the event logs handler?
franzk
2011-01-27T16:05:41Z
>Is there any way to re-register the event logs handler?

Only by uninstall and a fresh install.


I suspect there's something wrong with your Event Log. Try the following:

1.- Create a .VBS script with the following content:

'----
Set WshShell = CreateObject("WScript.Shell")
WshShell.LogEvent 4, "Script started."
WshShell.LogEvent 0, "Script completed."
'----

2.- Execute the script and then check if WSH events were written to the Application Event log.

Btw, if you restart the SL4NT service, are there event entries with Source 'SL4NT' logged or not?

-Franz
vrock
  • vrock
  • Newbie Topic Starter
2011-01-27T16:31:17Z
Ok ran the VBS script and it came back and said the log was full. So I changed the event log to overwrite as needed and now it works. Strange that it does not say it's full when I open the event log.

Thanks a bunch!!

Vince
Similar Topics