Microsoft KB Archive/817874

= &quot;ERROR: Invalid FILTER Operator&quot; Error Message When You Use the /FI FILTERNAME Parameter with Eventquery.vbs in the Chinese Language Version of Windows Server 2003 =

Article ID: 817874

Article Last Modified on 12/3/2007

-

APPLIES TO


 * Microsoft Windows Server 2003, Web Edition
 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
 * Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
 * Microsoft Windows Small Business Server 2003 Standard Edition
 * Microsoft Windows Small Business Server 2003 Premium Edition

-



SYMPTOMS
In the Chinese-Hong Kong and Traditional Chinese language versions of Windows Server 2003, if you use the Eventquery.vbs command-line tool, you may not be able to use the /fi  parameter to specify the types of events that you want to include or exclude from your event log query. For example, when you type cscript eventquery.vbs /fi &quot;type eq information&quot; at the command prompt to query event logs for &quot;information&quot; events, you receive the following error message:

ERROR: Invalid FILTER operator 'type' specified for the filter 'type eq error'



CAUSE
This problem occurs because the ' the filters as given by the user and ' Define const for filter separation when OR or ANDis specified in filter sections of the Eventquery.vbs file in the Chinese-Hong Kong and Traditional Chinese language versions of Windows Server 2003 contain incorrect content.



WORKAROUND
To work around this problem, manually edit the ' the filters as given by the user and ' Define const for filter separation when OR or ANDis specified in filter sections of the Eventquery.vbs file to include the correct content. To do so, follow these steps.

Note Before you perform the following procedure, you may want to make a backup copy of the Eventquery.vbs file. This file is located in the %Systemroot%\System32 folder on the hard disk.  Start Notepad, and then click Open on the File menu. Click All Files in the Files of type box, click the Eventquery.vbs file in the %Systemroot%\System32 folder, and then click Open. Locate the ' the filters as given by the user section. Copy and paste the following lines to replace the existing ' the filters as given by the user section:

' the filters as given by the user CONST L_UserFilterDateTime_Text        = &quot;datetime&quot; CONST L_UserFilterType_Text            = &quot;type&quot; CONST L_UserFilterUser_Text            = &quot;user&quot; CONST L_UserFilterComputer_Text        = &quot;computer&quot; CONST L_UserFilterSource_Text          = &quot;source&quot; CONST L_UserFilterDateCategory_Text    = &quot;category&quot; CONST L_UserFilterId_Text              = &quot;id&quot;

 Locate the ' Define const for filter separation when OR or ANDis specified in filter section. Copy and paste the following lines to replace the existing ' Define const for filter separation when OR or ANDis specified in filter section:

' Define const for  filter  separation when OR  or ANDis specified in filter CONST L_OperatorOR_Text          = &quot; OR &quot; CONST L_OperatorAND_Text          = &quot; AND &quot;

 On the File menu, click Save, and then quit Notepad.</li></ol>

<div class="status_section">

STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

<div class="moreinformation_section">

MORE INFORMATION
For more information about Eventquery.vbs, visit the following Microsoft Web site:

http://technet2.microsoft.com/WindowsServer/en/library/68672494-7700-4cbf-8392-4b6ef87b87491033.mspx?mfr=true

Keywords: kbprb kbpending KB817874

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.