How can I query from event viewer.

I can find 2 tables but no connection with computer

tsysEventAlerts
tsysEventfilter

Works great

Now I have a report that shows all machines with an error on hard drives.


Select Top 1000000 tblcomputers.Computer, tblntlogevent.Eventcode, tblntlogevent.Logfile, tblntlogevent.Message, tblntlogevent.Sourcename, tblcomputers.Description From tblntlogevent Inner Join tblcomputers On tblcomputers.Computername = tblntlogevent.Computername Where tblntlogevent.Eventcode = 7 And tblntlogevent.Sourcename = 'disk'

I think I figured it out:

Select Top 1000000 tblcomputers.Computer, tblntlogevent.Eventcode, tblntlogevent.Logfile, tblntlogevent.Message, tblntlogevent.Sourcename, tblcomputers.Description, tblntlogevent.TimeGenerated From tblntlogevent Inner Join tblcomputers On tblcomputers.Computername = tblntlogevent.Computername Where tblntlogevent.Eventcode = 7 And tblntlogevent.Sourcename = 'disk' And DateDiff(d, tblntlogevent.TimeGenerated, Current_TimeStamp) <= 2