Patent ID: 8086650
Filing Date: 2011-12-27
Classification: G06F,H04L

Abstract:
1. A computer-implemented method of translating an event record of an event log into a reconstituted event record, the method comprising acts of: rendering data contained in the event record into at least one data set; transforming, on a computer having at least one transformation engine, the at least one data set into at least one transformed data set using the at least one transformation engine including: generating the reconstituted event record from the at least one transformed data set, the reconstituted event record comprising the data contained in the event record in a format that is common to a pre-MICROSOFT WINDOWS® VISTA operating system event log and a MICROSOFT WINDOWS® VISTA operating system event log, such that the reconstituted event record can be managed on a computer executing any version of the MICROSOFT WINDOWS® operating system prior to and including the MICROSOFT WINDOWS® VISTA operating system; wherein the category/description transformation engine is operable to query, based on information in the at least one data set, a system registry to locate a message file containing a category message corresponding to a task number associated with the event record; and wherein the category/description transformation engine is further operable to locate the message file by sequentially applying a series of offset numbers to an event identifier in the event record.