Win32_NTLogEvent in .vbs / HJÄLP

[NYC-boy]

Hej!

 

Skulle vilja göra följande:

Använda eventtriggers till att skicka mail på alla error och warning loggar från eventviewern på dels 2003 server och dels 2000 server.

 

Jag sitter fast nu och behöver hjälp:

Först kör jag detta,

 

eventtriggers /create /tr "SERVER Error Event" /l * /t error /tk "SystemRoot%\System32\wscript.exe C:\Script\ServerErrorEvent.vbs" /ru

domain\user

 

Och här kommer koden:

 

Option Explicit

Dim dtmStart, SearchEventStart

Dim objWMIService, colEvents, objEvent, EventTime

Dim objMessage, eventCounted, Conf

'

Const SMTPServer = "server"

Const eMailAddress = "name.lastname@domain.com"

Const cdoSendUsingPort = 2

'

Const MinutesToSearchWithin = -2

'

' -------------------

'

Set Conf = CreateObject("CDO.Configuration")

 

With Conf.Fields

.Item("http://schemas.microsoft.com/cdo/configuration/sendus

ing") =

cdoSendUsingPort

.Item("http://schemas.microsoft.com/cdo/configuration/smtpse

rver") =

SMTPserver

.Update

End With

Set objMessage = CreateObject("CDO.Message")

With objMessage

End With

Set dtmStart = CreateObject("WbemScripting.SWbemDateTime")

SearchEventStart = DateAdd("n", MinutesToSearchWithin, Now())

dtmStart.SetVarDate SearchEventStart, True

Set objWMIService = GetObject("winmgmts:" _

& "{impersonationLevel=impersonate}!\\.\root\cimv2")

Set colEvents = objWMIService.ExecQuery _

("Select * from Win32_NTLogEvent Where EventType <> 1 AND EventType <> 2 And

TimeWritten >= '" _

& dtmStart & "'")

For each objEvent in colEvents

On Error Resume Next ' Maybe you should uncomment this line...

With objMessage

Set .Configuration = Conf

.To = "name.lastname@domain.com"

.From = "eventlogs@domain.com"

.TextBody = "Category: " & objEvent.Category

EventTime = Mid(objEvent.TimeWritten, 5, 2) & "/" &

Mid(objEvent.TimeWritten, 7, 2) & "/" & _

Mid(objEvent.TimeWritten, 1, 4) & " " & Mid(objEvent.TimeWritten, 9, 2) &

":" & _

Mid(objEvent.TimeWritten, 11, 2) & "." & Mid(objEvent.TimeWritten, 13, 2)

.TextBody = .TextBody & vbCrLf & "Time: " & EventTime

.Subject = "Error Event in " & objEvent.SourceName & " on " &

objEvent.ComputerName & " at " & EventTime

.TextBody = .TextBody & vbCrLf & "EventCode: " & objEvent.EventCode

.TextBody = .TextBody & vbCrLf & "Message: " & objEvent.Message

.TextBody = .TextBody & vbCrLf & "RecordNumber: " & objEvent.RecordNumber

.TextBody = .TextBody & vbCrLf & "SourceName: " & objEvent.SourceName

.TextBody = .TextBody & vbCrLf & "Type: " & objEvent.Type

.TextBody = .TextBody & vbCrLf & "User: " & objEvent.User

.Send

End With

Next

 

Men med denna kod får jag alla loggar och inte bara error och warning loggar.

 

Behöver hjälp,

 

Hälsningar,

Thomas