您当前的位置: - VBScript code
strBackupName = aaaaaaaa
Set objWMIService = GetObject("winmgmts:" & "{impersonationLevel=impersonate,(Backup)}!" & _
strComputer & "rootcimv2")
Set colLogFiles = objWMIService.ExecQuery("Select * from Win32_NTEventLogFile where LogFileName='System'")
For Each objLogfile in colLogFiles
Wscript.Echo "Time Written: " & objLogfile.TimeWritten
objLogFile.BackupEventLog("c:System-" & strBackupName & ".evt")
objLogFile.ClearEventLog()
Next
提示objLogfile没有TimeWritten属性,另外我想根据时间判断把前30天的System、Application、Security三种系统日志分别导出到三个.evt格式下的文件中。哪位大虾帮下忙
------解决方案--------------------
1,Win32_NTEventLogFile貌似只操作保存日志的文件，不能按具体的事件时间来区别操作吧.
2,要获得具体时间的事件,可以尝试用Win32_NTLogEvent.
3,提示objLogfile没有TimeWritten属性,你可以用下面的代码来遍历类的属性:
- VBScript code
sClassName = "Win32_NTEventLogFile"
For Each x In GetObject("Winmgmts:" & sClassName).Properties_
WScript.Echo x.Name
Next