Win32_NTLogEvent

[Guest]

Hi

I'm trying to put together a script which extracts all entries in all
Windows EventLogs and saves them in a textfile.
By enumerating Win32_NTLogEvent I get most of them.
However, I can't seem to extract any of the events in the Security log.

Does anybody know why and how I can do this?

Regards
Wayne

 

[Brandon McCombs]

Hi

I'm trying to put together a script which extracts all entries in all
Windows EventLogs and saves them in a textfile.
By enumerating Win32_NTLogEvent I get most of them.
However, I can't seem to extract any of the events in the Security log.

Does anybody know why and how I can do this?

Regards
Wayne

The script I have backs up the security log to a local file and then to a
network share for archival purposes. I'm using the WMI interface to make
the connection and to backup the log. In order to do that I have to query
WMI using a certain impersonation level so that the system will allow me to
handle the security log, considering that it is the security log. The
impersonation level must be set to Security and Backup for me. You should
only have to use Security in order to access the data in the log.

HTH
Brandon