# Accessing the system log on Windows

**URL:** <https://www.ruby-forum.com/t/accessing-the-system-log-on-windows/153141>\
**Category:** Ruby\
**Created:** [November 12, 2008, 4:46pm UTC](https://www.ruby-forum.com/t/accessing-the-system-log-on-windows/153141 "2008-11-12T16:46:37Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![trevoke](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/t/ee7513/32.png) [@trevoke](https://www.ruby-forum.com/u/trevoke)\
**Post date:** [November 12, 2008, 4:46pm UTC](https://www.ruby-forum.com/t/accessing-the-system-log-on-windows/153141/1 "2008-11-12T16:46:37Z")

</div>

This is in a production environment, so ruby 1.8.6. How would I go about  
parsing the Windows logs which one can read from the Event Viewer  
(Event, System, etc)? My point of focus is the System log, to see the  
logons / logoffs.

Thanks!

---

<div class="post-metadata">

**Author:** ![trevoke](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/t/ee7513/32.png) [@trevoke](https://www.ruby-forum.com/u/trevoke)\
**Post date:** [November 12, 2008, 6:12pm UTC](https://www.ruby-forum.com/t/accessing-the-system-log-on-windows/153141/2 "2008-11-12T18:12:18Z")

</div>

Aldric G. wrote:

> This is in a production environment, so ruby 1.8.6. How would I go about  
> parsing the Windows logs which one can read from the Event Viewer  
> (Event, System, etc)? My point of focus is the System log, to see the  
> logons / logoffs.
> 
> Thanks!

[https://rubyforge.org/projects/win32utils/](https://rubyforge.org/projects/win32utils/)

---

<div class="post-metadata">

**Author:** ![trevoke](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/t/ee7513/32.png) [@trevoke](https://www.ruby-forum.com/u/trevoke)\
**Post date:** [November 12, 2008, 6:20pm UTC](https://www.ruby-forum.com/t/accessing-the-system-log-on-windows/153141/3 "2008-11-12T18:20:39Z")

</div>

Shu-weet! Thank you!  
_adds rubyforge to his list of things to do before posting here_