- VBScript code
strBackupName = aaaaaaaaSet objWMIService = GetObject("winmgmts:" & "{impersonationLevel=impersonate,(Backup)}!\\" & _strComputer & "\root\cimv2")Set colLogFiles = objWMIService.ExecQuery("Select * from Win32_NTEventLogFile where LogFileName='System'")For Each objLogfile in colLogFiles Wscript.Echo "Time Written: " & objLogfile.TimeWritten objLogFile.BackupEventLog("c:\System-" & strBackupName & ".evt") objLogFile.ClearEventLog()Next
提示objLogfile没有TimeWritten属性,另外我想根据时间判断把前30天的System、Application、Security三种系统日志分别导出到三个.evt格式下的文件中。哪位大虾帮下忙
------解决方案--------------------------------------------------------
1,Win32_NTEventLogFile貌似只操作保存日志的文件,不能按具体的事件时间来区别操作吧.
2,要获得具体时间的事件,可以尝试用Win32_NTLogEvent.
3,提示objLogfile没有TimeWritten属性,你可以用下面的代码来遍历类的属性:
- VBScript code
sClassName = "Win32_NTEventLogFile"For Each x In GetObject("Winmgmts:" & sClassName).Properties_ WScript.Echo x.NameNext