This may help. Watch for linewrap.
Dim strConnect, strSQL, yr, m, d, h, min, s, timeobj
strConnect = "Provider=Microsoft.Jet.OLEDB.4.0;" _
& "Data Source=D:\Data\Access\Eventlog.mdb;" _
& "Mode=ReadWrite;Persist Security Info=False"
strSQL = "SELECT Category, ComputerName, EventCode, " _
& "Message, EventType, RecordNumber, SourceName, " _
& "Type, User, TimeGenerated, TimeWritten FROM EventTable; "
Set objConn = CreateObject("ADODB.Connection")
Set objRS = CreateObject("ADODB.Recordset")
objConn.Open strConnect
objRS.CursorLocation = 3
objRS.Open strSQL, objConn, 3, 3
strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!" _
& "\\" & strComputer & "\root\cimv2")
Set colRetrievedEvents = objWMIService.ExecQuery _
("Select * from Win32_NTLogEvent Where Logfile = 'System' and " _
& "EventCode = '6005' or EventCode = '6006'")
For Each objEvent in colRetrievedEvents
' If objEvent.SourceName = "PercRAID.Log" Then
objRS.AddNew
objRS("Category") = objEvent.Category
objRS("ComputerName") = objEvent.ComputerName
objRS("EventCode") = objEvent.EventCode
objRS("Message") = objEvent.Message
objRS("EventType") = objEvent.EventType
objRS("RecordNumber") = objEvent.RecordNumber
objRS("SourceName") = objEvent.SourceName
objRS("Type") = objEvent.Type
objRS("User") = objEvent.User
objRS("TimeGenerated") = DateTime2String(objEvent.TimeGenerated)
objRS("TimeWritten") = DateTime2String(objEvent.TimeWritten)
objRS.Update
' End If
Next
objRS.Close
objConn.Close
Function DateTime2String(timeobj)
yr = Left(timeobj,4)
m = Mid(timeobj,5,2)
d = Mid(timeobj,7,2)
h = Mid(timeobj,9,2)
min = Mid(timeobj,11,2)
s = Mid(timeobj,13,2)
DateTime2String = m & "/" & d & "/" & yr _
& " " & h & ":" & min & ":" & s
End Function
--
Regards,
Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect
:
| Set objFS = CreateObject("Scripting.FileSystemObject")
|
| 'Open logfile. True means Overwrite any old file
| Set objLogFile = objFS.CreateTextFile
| ("d:\watch\when_on.log", True)
|
| 'Write to log file
| objLogFile.WriteLine("Log started at " & now() )
|
| strComputer = "."
| Set objWMIService = GetObject("winmgmts:" _
| & "{impersonationLevel=impersonate}!\\" & strComputer
| & "\root\cimv2")
|
| Set colLoggedEvents = objWMIService.ExecQuery _
| ("Select * from Win32_NTLogEvent Where Logfile = 'System'
| and " _
| & "EventCode = '6005' or EventCode = '6006'")
|
| for each objevent in colloggedevents
|
| Dim wConvDate
| Set wConvDate = CreateObject("WbemScripting.SWbemDateTime")
| wConvDate.Value = objevent
| wscript.echo wConvDate.GetVarDate
| Set wConvDate = Nothing
|
| objLogFile.WriteLine(objevent.timewritten & ": " &
| objevent.message )
| next
|
| In the above script, I am having problems getting it to
| convert the value of objevent to readable time and date.
| I know that the line
|
| wConvDate.Value = objevent
|
| is wrong becuase this is where I get the error. I have
| tried searching and have had no luck finding the answer.
| Any suggestions? TIA!