Eventlog to HTML

Forums

My Profile

Inbox

Address Book

My Subscription

My Forums

Eventlog to HTML

Logged in as: Guest

arrSession:exec spGetSession 2,16,24668

	Active Users: There are 0 members and 0 guests.
	Users viewing this topic: none

Printable Version

All Forums >> [Scripting] >> Post a VBScript >> Eventlog to HTML
Do you like VisualBasicScript.com? Link to us and help spread the word about our forum. Thanks!

Page: [1]

Message

<< Older Topic Newer Topic >>

Eventlog to HTML - 8/10/2005 1:49:26 AM

Snipah

Posts: 1343
Score: 6
Joined: 11/1/2004
From: Netherlands
Status: offline

I use this script often to get a quick glance of the Eventlog (without the hassle of clicking a thousend times)

' COLLECTS LAST 24HRS WORTH OF EVENTS AND SAVES IT IN AN HTML FILE
' INITIALISE DATE VARIABLES TO COMPILE DATE AND TIME IN CORRECT FORMAT FOR COMPARISON

varYear = Year(now)
varMonth = Month(now)
varDay = Day(now)
if varDay = 1 then
varMonth1 = Month(now) -1
else
varmonth1 = Month(now)
end if
if varDay = 1 then
varYesterday = Day(last)
else
varYesterday = Day(now) -1
end if
varHour = Hour(now)
varMins = Minute(now)
varSecs = Second(now)
varWarning = "warning"
varError = "error"
Dim varServerArray
a = 0
Dim strComputer
strComputer = "."
'ARRAY TO POPULATE WITH THE SERVERS OR WORKSATIONS IN YOUR DOMAIN
varServerArray = Array("WorksationName","ServerName")
'MsgBox varServerArray(a)
'APPEND 0 TO DAYS AND MONTHS UNDER 10 TO MAINTAIN CORRECT FORMAT FOR COMPARISON
If varSecs < 10 Then
varSecs = "0" & varSecs
End If
If varMins < 10 Then
varMins = "0" & varMins
End If
If varHour < 10 Then
varHour = "0" & varHour
End If
If varDay < 10 Then
varDay = "0" & varDay
End If
If varMonth < 10 Then
varMonth = "0" & varMonth
End If
If varMonth1 < 10 Then
varMonth1 = "0" & varMonth1
End If
If varYesterday < 10 Then
varYesterday = "0" & varYesterday
End If
'Concatanate the date fields
dtmStartDate = varYear & varMonth1 & varYesterday & varHour & varMins & "00" & ".000000-240"
dtmEndDate = varYear & varMonth & varDay & varHour & varMins & "00" & ".000000-240"
'This is where the file will be saved
resultsfile = "C:\" & varYear & varMonth & varDay & " event log error" & ".html"
msgbox resultsfile
'Function to create a readable Date time
Function WMIDateStringToDate(dtmDate)
WMIDateStringToDate = CDate(Mid(dtmDate, 5, 2) & "/" & _
Mid(dtmDate, 7, 2) & "/" & Left(dtmDate, 4) _
& " " & Mid (dtmDate, 9, 2) & ":" & _
Mid(dtmDate, 11, 2) & ":" & Mid(dtmDate, _
13, 2))
End Function

'Creates html file
Set fs = WScript.CreateObject("Scripting.FileSystemObject")
Set objDocument = fs.CreateTextFile(resultsfile, True)
objDocument.Writeline ("<html>")
objDocument.Writeline ("<table BORDER=0 width=100% cellspacing=0 cellpadding=3>")
objDocument.Writeline ("<tr>")
objDocument.Writeline ("<th bgcolor=#000080 colspan=6 width=400>")
objDocument.Writeline ("")
objDocument.Writeline("Event LogErrors and Warnings in the last 24Hrs")
objDocument.Writeline ("</th>")
objDocument.Writeline ("</tr>")
objDocument.Writeline ("<tr>")
objDocument.Writeline("<th bgcolor=#C0C0C0 width=60>Computer Name</th>")
objDocument.Writeline("<th bgcolor=#C0C0C0 width=100>Event Code/Log</th>")
objDocument.Writeline("<th bgcolor=#C0C0C0 width=60>Source Name</th>")
objDocument.Writeline("<th bgcolor=#C0C0C0 width=60>Time Written</th>")
objDocument.Writeline("<th bgcolor=#C0C0C0 width=60>Type</th>")
objDocument.Writeline("<th bgcolor=#C0C0C0 width=60>Message</th>")
objDocument.Writeline ("</tr>")
'For each counter in varServerArray
SetobjWMIService = GetObject("winmgmts:" &"{impersonationLevel=impersonate}!\\" & strComputer &"\root\cimv2") 'varServerArray(a)
Set colLoggedEvents =objWMIService.ExecQuery ("Select * from Win32_NTLogEvent WhereTimeWritten >= '" & dtmStartDate & "' and TimeWritten <='" & dtmEndDate & "' and Type = '" & varError & "'")
SetcolLoggedEvents1 = objWMIService.ExecQuery ("Select * fromWin32_NTLogEvent Where TimeWritten >= '" & dtmStartDate & "'and TimeWritten <= '" & dtmEndDate & "' and Type = '" &varWarning & "'")

For Each objEvent in colLoggedEvents
objDocument.Writeline ("<TR>")
objDocument.Writeline("<TD> " &objEvent.ComputerName & "</TD>")
objDocument.Writeline("<TD> " &objEvent.EventCode & " / " & objEvent.LogFile&"</TD>")
objDocument.Writeline("<TD> " &objEvent.SourceName & "</TD>")
objDocument.Writeline("<TD> " &WMIDateStringToDate(objEvent.TimeGenerated) &"</TD>")
objDocument.Writeline("<TD> " &objEvent.Type & "</TD>")
objDocument.Writeline("<TD> " &objEvent.Message & "</TD>")
objDocument.Writeline ("</TR>")

Next
For Each objEvent in colLoggedEvents1
objDocument.Writeline ("<TR>")
objDocument.Writeline("<TD> " &objEvent.ComputerName & "</TD>")
objDocument.Writeline("<TD> " &objEvent.EventCode & " / " & objEvent.LogFile&"</TD>")
objDocument.Writeline("<TD> " &objEvent.SourceName & "</TD>")
objDocument.Writeline("<TD> " &WMIDateStringToDate(objEvent.TimeGenerated) &"</TD>")
objDocument.Writeline("<TD> " &objEvent.Type & "</TD>")
objDocument.Writeline("<TD> " &objEvent.Message & "</TD>")
objDocument.Writeline ("</TR>")
Next
a = a + 1 ' THIS IS THE ARRAY INCREMENTOR
'Next
MsgBox "Eventlog dump complete"

< Message edited by Snipah -- 8/31/2006 10:47:37 PM >

Revisions: 1 | Post #: 1

RE: Eventlog to HTML - 8/8/2007 12:33:36 AM

4scriptmoni

Posts: 192
Score: 0
Joined: 5/3/2007
Status: offline

Cool script!
Error Line 87 SetobjWMIService error, sure the date format is correct?
i am still debuging to make it work here..

_____________________________

Enterprise Microsoft Scripts
Exchange, Login/Logout Monitor,TS, Monitoring, Security, AD, etc...
http://www.felipeferreira.net

(in reply to Snipah)

Revisions: 1 | Post #: 2

RE: Eventlog to HTML - 8/8/2007 3:20:57 AM

ehvbs

Posts: 2077
Score: 50
Joined: 6/22/2005
From: Germany
Status: offline

Hi 4scriptmoni,

just in (the unlikely) case you didn't change:

SetobjWMIService = GetObject("winmgmts: ...
...
SetcolLoggedEvents1 = objWMIService.ExecQuery (...

===>

Set objWMIService = GetObject("winmgmts: ...
...
Set colLoggedEvents1 = objWMIService.ExecQuery (...

[edit: overlooked some more missing spaces]:

Set colLoggedEvents = objWMIService.ExecQuery( _
 "Select * from Win32_NTLogEvent Where TimeWritten >= '" & dtmStartDate & "' and TimeWritten <='" & dtmEndDate & "' and Type = '" & varError & "'" _
 )
Set colLoggedEvents1 = objWMIService.ExecQuery( _
 "Select * from Win32_NTLogEvent Where TimeWritten >= '" & dtmStartDate & "' and TimeWritten <= '" & dtmEndDate & "' and Type = '" & varWarning & "'" _
 )

< Message edited by ehvbs -- 8/8/2007 3:32:23 AM >

(in reply to 4scriptmoni)

Revisions: 1 | Post #: 3

RE: Eventlog to HTML - 8/9/2007 1:26:30 AM

ebgreen

Posts: 4613
Score: 31
Joined: 7/12/2005
Status: offline

Or you could do it as one line in powershell:

Get-EventLog application | ConvertTo-Html | Out-File C:\foo.html

_____________________________

"... when you are good and crazy, oooh, oooh, oooh, the sky is the limit!" - The Tick
Goog places to start:http://www.visualbasicscript.com/m_24727/tm.htm
http://www.visualbasicscript.com/m_47117/tm.htm

(in reply to ehvbs)

Post #: 4

RE: Eventlog to HTML - 8/13/2007 7:49:57 AM

CondoPC

Posts: 118
Score: 0
Joined: 7/23/2007
Status: offline

yes, but powershell doesn't let you pull eventlogs remotely. Can't beat the single line command tho

(in reply to ebgreen)

Post #: 5

RE: Eventlog to HTML - 8/13/2007 9:12:18 AM

Parabellum

Posts: 222
Score: 0
Joined: 11/12/2006
From: UK
Status: offline

i'm definately no powershell expert, so i could be wrong... but i think you can actualy
using rexec and rshell you can remotely exec commands
as I say... not a powershell expert, so could be wrong.. but maybe one of our resident PS experts could explain the commands???!

(in reply to CondoPC)