Dumpevt return code meaning needed

[Guest]

We are using Dumpevt V1.7.5 on our servers. It works for most other servers but one. On this server, the utility works to dump information from security and system logs, but not from the application log. The following is the output:

2/16/2007 6:00:22 AM
Somarsoft DumpEvt V1.7.5, Copyright © 1995-1997 by Somarsoft, Inc.
LogType=Application
Computer=usatlbli
SystemRoot=C:\WINNT
Outfile=e:\dba\temp\evtlogdump_app.csv
Use HKEY_LOCAL_MACHINE for saving record number
Format=yes
DateFormat=(locale dependent)
TimeFormat=HH':'mm':'ss
FieldSeparator=,
ReplaceFieldSeparator= (blank)
ReplaceCR=^
ReplaceLF=`
StringSeparator=;
MaxMessageLen=32000
MaxFragmentLen=32000
DumpData=none
SplitDateTime=no
UseGmtTime=no
DumpRecnum=no
==>LastProcessed (0) < Oldest (1), log records lost
process event log records starting with 1
==>RegOpenKeyEx rc=2 source=NTRights key=SYSTEM\CurrentControlSet\Services\EventLog\App lication\NTRights
==>Format message error, source=NTRights type=Message msg=5000 rc=317
==>ReadEventLog rc=122 cbReq=102764

The registry entry is not created.

Where can I find a list of the return codes and their meanings?

Thanks
Liping

[cmccullough]

Re: Dumpevt return code meaning needed

It appears it can't open that key:

SYSTEM\CurrentControlSet\Services\EventLog\Applica tion\NTRights

I would start with permissions to see if you can find out why that key can't be opened.

[Guest]

Re: Dumpevt return code meaning needed

There is no such key on the server. It is not on servers where dumpevt works either. Where does dumpevt get this information? Can we get a list of the error codes and meanings? Thanks. Liping

<div class="ubbcode-block"><div class="ubbcode-header">Quote:</div><div class="ubbcode-body">Originally posted by cmccullough:
<span style="font-weight: bold">It appears it can't open that key:

SYSTEM\CurrentControlSet\Services\EventLog\Applica tion\NTRights

I would start with permissions to see if you can find out why that key can't be opened.</span></div></div>

[kstanush]

Re: Dumpevt return code meaning needed

This error is caused by another error shown above; it has nothing to with the registry keys. There also isn't anything that can be done to fix it on your end.

I'll try to come up with a workaround to this and post a patch next week.

[kstanush]

Re: Dumpevt return code meaning needed

Try this version:
http://www.systemtools.com/download/dumpevt2.zip

Let us know if this resolves this issue.

Thanks

[Guest]

Re: Dumpevt return code meaning needed

Thanks a lot! The new .exe file did fix our problem on this server. We are rolling it out to other servers. Hopefully it will still work on other servers.

Liping
<div class="ubbcode-block"><div class="ubbcode-header">Quote:</div><div class="ubbcode-body">Originally posted by kstanush:
<span style="font-weight: bold">Try this version:
http://www.systemtools.com/download/dumpevt2.zip

Let us know if this resolves this issue.

Thanks</span></div></div>