#To define a particular parameter, replace the 'parameterName' inside itsm.getParameter('parameterName') with that parameter's name event_list=['1014'] event_levels=["3","4"]# Level 1 Critical,Level 2 Error,Level 3 Warning,Level 4 Information event_logname="System" import os import ctypes class disable_file_system_redirection: _disable = ctypes.windll.kernel32.Wow64DisableWow64FsRedirection _revert = ctypes.windll.kernel32.Wow64RevertWow64FsRedirection def __enter__(self): self.old_value = ctypes.c_long() self.success = self._disable(ctypes.byref(self.old_value)) def __exit__(self, type, value, traceback): if self.success: self._revert(self.old_value) def event_function(logname,level,eventid): with disable_file_system_redirection(): for i in eventid: cmd='wevtutil qe %s "/q:*[%s [(EventID=%s and (Level=%s or Level=%s ))]]" /f:text /c:5 /rd:True'%(logname,logname,i,level[0],level[1]) #print cmd syslogs=os.popen(cmd).read() if not syslogs: print "No event Log for Event ID %s"%i else: print syslogs event_function(event_logname,event_levels,event_list)