I want to find the newest event log entry of a customer application’s specific event id in the application event log. I have the following relevance returning the proper description but it is for the oldest one and not the newest one.
description of records whose (event id of it = 537330764 ) of application event log
any idea on how to pull the newest one (could be from today or several months ago) and how to get the date?
(
time generated of it, description of it
)
of records
whose
(
event id of it = 3221242527
and
time generated of it = maximum of times generated of records
whose
(
event id of it = 3221242527
)
of application event log
)
of application event log
But, use this one… it’s much much faster:
(
time generated of it, description of it
)
of items 1 of it
whose
(
time generated of item 1 of it = item 0 of it
)
of
(
maximum of times generated of records
whose
(
event id of it = 3221242527
)
of it, records
whose
(
event id of it = 3221242527
)
of it
)
of application event log
Both of them output the same thing:
( Sat, 22 Sep 2007 23:00:01 -0800 ), 8128 :%0d%0aUsing ‘xpstar.dll’ version ‘2000.80.2039’ to execute extended stored procedure ‘xp_instance_regread’.%0d%0a