windows事件日志写入sqlserver

欢迎进入Windows社区论坛，与300万技术人员互动交流 >>进入 Set objConn = CreateObject("ADODB.Connection") Set objRS = CreateObject("ADODB.Recordset") objConn.Open "Provider=SQLOLEDB.1;Password=****;Persist Security Info=True;User ID=zhang;Ini

欢迎进入windows社区论坛，与300万技术人员互动交流 >>进入

　　Set objConn = CreateObject("ADODB.Connection")

　　Set objRS = CreateObject("ADODB.Recordset")

　　objConn.Open "Provider=SQLOLEDB.1;Password=****;Persist Security Info=True;User ID=zhang;Initial Catalog=IPOPJ;Data Source=SV3SQLEXPRESS"

　　objRS.CursorLocation = 3

　　objRS.Open "SELECT * FROM EventTable" , objConn, 3, 3

　　Set dtmStartDate = CreateObject("WbemScripting.SWbemDateTime")

　　Set dtmEndDate = CreateObject("WbemScripting.SWbemDateTime")

　　DateToCheck = Date - 1

　　dtmEndDate.SetVarDate Date, True

　　dtmStartDate.SetVarDate DateToCheck, True

　　strComputer = "."

　　Set objWMIService = GetObject("winmgmts:" _

　　& "{impersonationLevel=impersonate}!\" & strComputer & " ootcimv2")

　　Set colEvents = objWMIService.ExecQuery _

　　("Select * from Win32_NTLogEvent Where Logfile = 'Security' "_

　　& " And TimeWritten >= '"  & dtmStartDate & "' and TimeWritten

　　For each objEvent in colEvents

Reclaim.ai

为优先事项创建完美的时间表

90

查看详情

　　objRS.AddNew

　　objRS("Category") = objEvent.Category

　　objRS("ComputerName") = objEvent.ComputerName

　　objRS("EventCode") = objEvent.EventCode

　　objRS("Message") = objEvent.Message

　　objRS("RecordNumber") = objEvent.RecordNumber

　　objRS("SourceName") = objEvent.SourceName

　　objRS("TimeWritten") = objEvent.TimeWritten

　　objRS("Type") = objEvent.Type

　　objRS("UserName") = objEvent.User

　　objRS.Update

　　Next

　　objRS.Close

　　objConn.Close