备份和清除事件日志

 

描述

备份和清除应用程序事件日志。

脚本代码
strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
   & "{ impersonationLevel=impersonate,(Backup) }!\\" & _
       strComputer & "\root\cimv2")
Set colLogFiles = objWMIService.ExecQuery _
   ("Select * from Win32_NTEventLogFile where LogFileName='Application'")
For Each objLogfile in colLogFiles
   errBackupLog = objLogFile.BackupEventLog("c:\scripts\application.evt")
   If errBackupLog <> 0 Then        
       Wscript.Echo "The Application event log could not be backed up."
   Else
       objLogFile.ClearEventLog()
   End If
Next