RE: pars event log for event typer = error email event info script help

Forums

My Profile

Inbox

Address Book

My Subscription

My Forums

RE: pars event log for event typer = error email event info script help

Logged in as: Guest

arrSession:exec spGetSession 2,2,58370

	Active Users: There are 0 members and 0 guests.
	Users viewing this topic: none

Printable Version

All Forums >> [Scripting] >> WSH & Client Side VBScript >> RE: pars event log for event typer = error email event info script help
Do you like VisualBasicScript.com? Link to us and help spread the word about our forum. Thanks!

Page: << < prev 1 [2]

Message

<< Older Topic Newer Topic >>

RE: pars event log for event typer = error email event ... - 4/3/2008 10:16:31 AM

aron

Posts: 32
Score: 0
Joined: 10/31/2006
Status: offline

ok cool i got it working.

' EventLogFSO.vbs
' Sample VBScript to write event log data to text file
' Author Guy Thomas [link=http://computerperformance.co.uk/]http://computerperformance.co.uk/[/link]
' Version 1.7 - May 2006
' -----------------------------------------------------------' 
Option Explicit
Dim objFSO, objFolder, objFile, objWMI, objItem, objShell
Dim strComputer, strFileName, strFileOpen, strFolder, strPath
Dim intEvent, intNumberID, intRecordNum, colLoggedEvents
Dim intEventType, strLogType 
' --------------------------------------------------------
' Set the folder and file name
strComputer = "."
strFileName = "\Event680.txt"
strFolder = "c:\logs"
strPath = strFolder & strFileName
' Set numbers
'intNumberID = 680 ' Event ID Number
intEventType = 1
strLogType = "'Application'"
intRecordNum = 0
' -----------------------------------------------------
' time function
WScript.Echo StdToUTCTime(Now() - 1)
Dim UTCTime: UTCTime = StdToUTCTime(Now() - 1)
Function StdToUTCTime(inputDT)
  Dim objTime : Set objTime = CreateObject("WbemScripting.SWbemDateTime")
  Dim UTCDateTime: UTCDateTime = objtime.SetVarDate(inputDT)
  StdToUTCTime = objTime
End Function

' -----------------------------------------------------
' Section to create folder and hold file.
' Create the File System Object
Set objFSO = CreateObject("Scripting.FileSystemObject")
' Check that the strFolder folder exists
If objFSO.FolderExists(strFolder) Then
Set objFolder = objFSO.GetFolder(strFolder)
Else
Set objFolder = objFSO.CreateFolder(strFolder)
WScript.Echo "Just created " & strFolder
End If
If objFSO.FileExists(strFolder & strFileName) Then
Set objFolder = objFSO.GetFolder(strFolder)
Else
Set objFile = objFSO.CreateTextFile(strFolder & strFileName)
Wscript.Echo "Just created " & strFolder & strFileName
End If 
' --------------------------------------------------
' Two tiny but vital commands (Try script without)
set objFile = nothing
set objFolder = nothing
' ----------------------------------------------------
' Write the information to the file
Wscript.Echo " Press OK and Wait 30 seconds (ish)"
Set strFileOpen = objFso.CreateTextFile(strPath, True)
' ----------------------------------------------------------
' WMI Core Section 
Set objWMI = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate,(Security)}!\\" _
& strComputer & "\root\cimv2")
Set colLoggedEvents = objWMI.ExecQuery _
("Select * from Win32_NTLogEvent Where Logfile =" & strLogType & " and EventType =" & intEventType  & " and TimeGenerated >= '" & UTCTime & "'")
' ----------------------------------------------------------
' Next section loops through ID properties
For Each objItem in colLoggedEvents
'If objItem.EventCode = intNumberID Then
If objItem.EventType = intEventType Then
strFileOpen.WriteLine ("Category: " & objItem.Category)
strFileOpen.WriteLine ("CategoryString: " & objItem.CategoryString)
strFileOpen.WriteLine ("ComputerName: " & objItem.ComputerName)
strFileOpen.WriteLine ("Data: " & objItem.Data)
strFileOpen.WriteLine ("Event Code: " & objItem.EventCode)
strFileOpen.WriteLine ("Event Identifier: " & objItem.EventIdentifier)
strFileOpen.WriteLine ("Event Type: " & objItem.EventType)
'strFileOpen.WriteLine ("Insertion Strings: " & objItem.InsertionStrings)
strFileOpen.WriteLine ("Logfile: " & objItem.Logfile)
strFileOpen.WriteLine ("Record Number: " & objItem.RecordNumber)
strFileOpen.WriteLine ("Source Name: " & objItem.SourceName)
strFileOpen.WriteLine ("Time Generated: " & objItem.TimeGenerated)
strFileOpen.WriteLine ("Time Written: " & objItem.TimeWritten)
strFileOpen.WriteLine ("Type: " & objItem.Type)
strFileOpen.WriteLine ("User: " & objItem.User)
strFileOpen.WriteLine ("Message: " & objItem.Message)
strFileOpen.WriteLine (" ")
strFileOpen.WriteLine ("------------------------------------------------------------------------------------------------")
strFileOpen.WriteLine (" ")
intRecordNum = intRecordNum +1
'End If 
End If
Next
' Confirms the script has completed and opens the file
Set objShell = CreateObject("WScript.Shell")
objShell.run ("Explorer" &" " & strPath & "\" )
WScript.Quit
' End of Guy's FSO sample VBScript

it might not be streamlined but for now i sorta understant it a bit, when my vb skils get better ill make it more streamlined

cheers aron.

(in reply to aron)

Post #: 21

RE: pars event log for event typer = error email event ... - 4/3/2008 10:30:30 AM

dm_4ever

Posts: 2641
Score: 46
Joined: 6/29/2006
From: Orange County, California
Status: offline

Good to hear you got it working.

_____________________________

dm_4ever

My philosophy: K.I.S.S - Keep It Simple Stupid
Read Me: http://www.visualbasicscript.com/m_24727/tm.htm
Frequently Asked Stuff: http://www.visualbasicscript.com/m_47117/tm.htm

(in reply to aron)