How to get the overwrite policy of the system event logs in the LANDesk inventory

Currently no information about the event logs of the devices are reported in the inventory of the device.

Running the simple script attached on the devices you can retreive the overwrite policy of the system event logs and store them in the registy.

Then modifying the LDAPPL3.TEMPLATE on the core you can tell the Inventory Scanner to retreive these values and add them as custom values to the Inventory.

The script can be easly re-adapted to retreive other properties of the event log files.

It is possible to find more information about the event logs properties at this url on the Microsoft site: http://www.microsoft.com/technet/scriptcenter/guide/sas_log_iwbi.mspx?mfr=true

How to use the script

1. Modify the LDAPPL3.TEMPLATE that is in \\<coreserver>\ldlogon and add in the [Registry Info] section these lines:
   

   ;Event Log parameters
   KEY=HKLM,Software\EventsLogs,Application Policy,Custom Data - OS - Event Logs - Application Log Policy
   KEY=HKLM,Software\EventsLogs,Application Size,Custom Data - OS - Event Logs - Application Log Size

   KEY=HKLM,Software\EventsLogs,Security Policy,Custom Data - OS - Event Logs - Security Log Policy
   KEY=HKLM,Software\EventsLogs,Security Size,Custom Data - OS - Event Logs - Security Log Size

   KEY=HKLM,Software\EventsLogs,System Policy,Custom Data - OS - Event Logs - System Log Policy
   KEY=HKLM,Software\EventsLogs,System Size,Custom Data - OS - Event Logs - System Log Size

2. Press the button "Make available to Clients" in the Software Licese Monitoring window.
3. Run periodically the script EventLogInfo.vbs on the devices
4. The event logs parameters will be available in the inventory under the Custom Data - OS - Event Logs node.

Click on the link below to download the script

http://community.landesk.com/support/servlet/JiveServlet/download/5697-2-20921/EventLogInfo.vbs