# Win32utils tail eventlog error upon change

**URL:** <https://www.ruby-forum.com/t/win32utils-tail-eventlog-error-upon-change/59975>\
**Category:** Ruby\
**Created:** [May 9, 2006, 5:58am UTC](https://www.ruby-forum.com/t/win32utils-tail-eventlog-error-upon-change/59975 "2006-05-09T05:58:56Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![PeSSSSaS\_Botp](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/ecd19e/32.png) [@PeSSSSaS\_Botp](https://www.ruby-forum.com/u/PeSSSSaS_Botp)\
**Post date:** [May 9, 2006, 5:58am UTC](https://www.ruby-forum.com/t/win32utils-tail-eventlog-error-upon-change/59975/1 "2006-05-09T05:58:56Z")

</div>

Hi win32 team,

I have the ff code.

C:\ruby\win-eventlog\>cat test4.rb  
require ‘win32/eventlog’  
include Win32

# Tail the event logs

EventLog.open(‘Security’).tail{ |log|  
p ‘changed noted!’ if /account (changed|disabled)/i =~  
log.description  
p log  
}

and I’m gettting the ff error (if i trigger a change, eg, change an  
account password),

C:\ruby\win-eventlog\>ruby test4.rb  
test4.rb:7:in `tail’: Insufficient system resources exist to complete  
the requested service. (Win32::EventLogError)  
from test4.rb:7

hope you could give me some hints on proper tailing the security log.  
thank you.

kind regards -botp

---

<div class="post-metadata">

**Author:** ![PeSSSSaS\_Botp](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/ecd19e/32.png) [@PeSSSSaS\_Botp](https://www.ruby-forum.com/u/PeSSSSaS_Botp)\
**Post date:** [May 9, 2006, 6:32am UTC](https://www.ruby-forum.com/t/win32utils-tail-eventlog-error-upon-change/59975/2 "2006-05-09T06:32:23Z")

</div>

Peña wrote:

> EventLog.open(‘Security’).tail{ |log|
> 
> hope you could give me some hints on proper tailing the security log.  
> thank you.
> 
> kind regards -botp

Works fine for me. The error you’re seeing makes me wonder if the  
particular event log is over 64k. If you look at the event log manually  
through the Windows Event Viewer, can you get a rough idea of how big it  
is?

Can you tell us what platform you’re on, what version of Ruby you’re  
running, what version of win32-eventlog and how you built/installed  
win32-eventlog?

Regards,

Dan