 Loading |
|
Loading |
| VBScript |
| JavaScript |
| Powershell |
Search Options: WMI Win32_NTLogEvent Query
|
||
|
var wbemFlagReturnImmediately = 0x10;
var wbemFlagForwardOnly = 0x20; var arrComputers = new Array("."); for (i = 0; i < arrComputers.length; i++) { WScript.Echo(); WScript.Echo("=========================================="); WScript.Echo("Computer: " + arrComputers[i]); WScript.Echo("=========================================="); var objWMIService = GetObject("winmgmts:\\\\" + arrComputers[i] + "\\root\\CIMV2"); var colItems = objWMIService.ExecQuery("SELECT * FROM Win32_NTLogEvent", "WQL", wbemFlagReturnImmediately | wbemFlagForwardOnly); var enumItems = new Enumerator(colItems); for (; !enumItems.atEnd(); enumItems.moveNext()) { var objItem = enumItems.item(); WScript.Echo("Category: " + objItem.Category); WScript.Echo("CategoryString: " + objItem.CategoryString); WScript.Echo("ComputerName: " + objItem.ComputerName); try { WScript.Echo("Data: " + (objItem.Data.toArray()).join(",")); } catch(e) { WScript.Echo("Data: null"); } WScript.Echo("EventCode: " + objItem.EventCode); WScript.Echo("EventIdentifier: " + objItem.EventIdentifier); WScript.Echo("EventType: " + objItem.EventType); try { WScript.Echo("InsertionStrings: " + (objItem.InsertionStrings.toArray()).join(",")); } catch(e) { WScript.Echo("InsertionStrings: null"); } WScript.Echo("Logfile: " + objItem.Logfile); WScript.Echo("Message: " + objItem.Message); WScript.Echo("RecordNumber: " + objItem.RecordNumber); WScript.Echo("SourceName: " + objItem.SourceName); WScript.Echo("TimeGenerated: " + WMIDateStringToDate(objItem.TimeGenerated)); WScript.Echo("TimeWritten: " + WMIDateStringToDate(objItem.TimeWritten)); WScript.Echo("Type: " + objItem.Type); WScript.Echo("User: " + objItem.User); } } function WMIDateStringToDate(dtmDate) { if (dtmDate == null) { return "null date"; } var strDateTime; if (dtmDate.substr(4, 1) == 0) { strDateTime = dtmDate.substr(5, 1) + "/"; } else { strDateTime = dtmDate.substr(4, 2) + "/"; } if (dtmDate.substr(6, 1) == 0) { strDateTime = strDateTime + dtmDate.substr(7, 1) + "/"; } else { strDateTime = strDateTime + dtmDate.substr(6, 2) + "/"; } strDateTime = strDateTime + dtmDate.substr(0, 4) + " " + dtmDate.substr(8, 2) + ":" + dtmDate.substr(10, 2) + ":" + dtmDate.substr(12, 2); return(strDateTime); } | ||
© 2008 - 2013 Boris Toll :: Scripts available: 6.481 :: :: scriptbox.toll.at :: :: powered by www.toll.at :: | ||
