读取日志记录:
Imports System
Imports System.Management
Module Module1
Public Sub Main()
Dim strComputer = "magicdog"
Dim wbemServices, wbemObjectSet, wbemObject
wbemServices = GetObject("winmgmts:\\" & strComputer)
wbemObjectSet = wbemServices.InstancesOf("Win32_NTLogEvent")
For Each wbemObject In wbemObjectSet
Console.WriteLine("日志文件:" & wbemObject.LogFile)
Console.WriteLine("记录号:" & wbemObject.RecordNumber)
Console.WriteLine("类型:" & wbemObject.Type)
Console.WriteLine("产生时间:" & wbemObject.TimeGenerated)
Console.WriteLine("源名称:" & wbemObject.SourceName)
Console.WriteLine("事件代码:" & wbemObject.EventCode)
Console.WriteLine("用户" & wbemObject.User)
Console.WriteLine("计算机名:" & wbemObject.ComputerName)
Console.WriteLine("信息:" & wbemObject.Message)
Next
End Sub
End Module
---------------------------------------------------------------------------------------
删除日志文件:(请先备份)
Imports System
Imports System.Management
Module Module1
Public Sub Main()
Dim strComputer = "."
Dim objWMIService, objLogFiles, objLogFile, logs, mylogs(3)
objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate,(Backup)}!\\" & strComputer & "\root\cimv2")
mylogs(1) = "application"
mylogs(2) = "system"
mylogs(3) = "security"
For Each logs In mylogs
objLogFiles = objWMIService.ExecQuery("Select * from Win32_NTEventLogFile where LogFileName=''''" & logs & "''''")
For Each objLogFile In objLogFiles
objLogFile.ClearEventLog()
Next
Next
End Sub
End Module
---------------------------------------------------------------------------------------
使用性能计数器:
Imports System
Imports System.Management
Module Module1
Public Sub Main()
[1] [2] 下一页 |