http://blogs.technet.com/stefan_stranger/archive/2008/05/13/opsmgr-2007-parameters-explained.aspxSome time ago I showed you can use PowerShell to create Events for OpsMgr 2007. And according to the comments quite some people have questions about Event parameters . After creating the first version of the PowerShell Create Events for OpsMgr 2007 script,en-USCommunityServer 2.1 SP1 (Build: 61025.2)http://blogs.technet.com/stefan_stranger/archive/2008/05/13/opsmgr-2007-parameters-explained.aspx#3054747Wed, 14 May 2008 00:31:11 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3054747Windows &raquo; OpsMgr 2007: Parameters Explained<p>PingBack from <a rel="nofollow" target="_new" href="http://windows.wawblog.info/?p=30477">http://windows.wawblog.info/?p=30477</a></p> http://blogs.technet.com/stefan_stranger/archive/2008/05/13/opsmgr-2007-parameters-explained.aspx#3068169Mon, 09 Jun 2008 15:40:17 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3068169Kevin Holman's OpsMgr Blog<p>When we write rules and monitors to look at events in the event log.... typically the most common criteria</p> http://blogs.technet.com/stefan_stranger/archive/2008/05/13/opsmgr-2007-parameters-explained.aspx#3211150Tue, 10 Mar 2009 12:43:38 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3211150stefstr<p>If you want to use Logparser in Windows 2008 there is a workaround.</p> <p>You could enter the path to the physical location of the eventlog files. Example:</p> <p>logparser.exe -i:EVT &quot;Select Count(*) from c:\windows\system32\winevt\logs\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx</p> <p>But there is a problem with 64-bit OSes. These use the 'File System Redirector for WOW64' feature. But here is also a solution for:</p> <p>logparser.exe -i:EVT &quot;Select Count(*) from c:\windows\sysnative\winevt\logs\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx </p> <p>More info on SysNative: <a rel="nofollow" target="_new" href="http://msdn.microsoft.com/en-us/library/aa384187">http://msdn.microsoft.com/en-us/library/aa384187</a>(VS.85).aspx</p>