Reference for Win32_NTEventlogFile
|
 |
Category (Kategorie):
Event LogsDescription (Beschreibung):
The Win32_NTEventlogFile WMI class represents a logical file or directory of Windows NT events.Availability (Verfügbarkeit):
| WMI Class Name | Windows Server 2003 | Windows XP Professional | Windows 2000 | Windows NT 4.0 | Windows 98 |
| Win32_NTEventlogFile | Yes | Yes | Yes | Yes | - |
Properties (Attribute):
| Item | Server 2003 | XP Pro | Windows 2000 | NT 4.0 | Windows 98 |
| AccessMask | Yes | Yes | Yes | Yes | - |
| Archive | Yes | Yes | Yes | Yes | - |
| Caption | Yes | Yes | Yes | Yes | - |
| Compressed | Yes | Yes | Yes | Yes | - |
| CompressionMethod | Yes | Yes | Yes | Yes | - |
| CreationClassName | Yes | Yes | Yes | Yes | - |
| CreationDate | Yes | Yes | Yes | Yes | - |
| CSCreationClassName | Yes | Yes | Yes | Yes | - |
| CSName | Yes | Yes | Yes | Yes | - |
| Description | Yes | Yes | Yes | Yes | - |
| Drive | Yes | Yes | Yes | Yes | - |
| EightDotThreeFileName | Yes | Yes | Yes | Yes | - |
| Encrypted | Yes | Yes | Yes | Yes | - |
| EncryptionMethod | Yes | Yes | Yes | Yes | - |
| Extension | Yes | Yes | Yes | Yes | - |
| FileName | Yes | Yes | Yes | Yes | - |
| FileSize | Yes | Yes | Yes | Yes | - |
| FileType | Yes | Yes | Yes | Yes | - |
| FSCreationClassName | Yes | Yes | Yes | Yes | - |
| FSName | Yes | Yes | Yes | Yes | - |
| Hidden | Yes | Yes | Yes | Yes | - |
| InstallDate | Yes | Yes | Yes | Yes | - |
| InUseCount | Yes | Yes | Yes | Yes | - |
| LastAccessed | Yes | Yes | Yes | Yes | - |
| LastModified | Yes | Yes | Yes | Yes | - |
| LogfileName | Yes | Yes | Yes | Yes | - |
| Manufacturer | Yes | Yes | Yes | Yes | - |
| MaxFileSize | Yes | Yes | Yes | Yes | - |
| Name | Yes | Yes | Yes | Yes | - |
| NumberOfRecords | Yes | Yes | Yes | Yes | - |
| OverwriteOutDated | Yes | Yes | Yes | Yes | - |
| OverWritePolicy | Yes | Yes | Yes | Yes | - |
| Path | Yes | Yes | Yes | Yes | - |
| Readable | Yes | Yes | Yes | Yes | - |
| Sources | Yes | Yes | Yes | Yes | - |
| Status | Yes | Yes | Yes | Yes | - |
| System | Yes | Yes | Yes | Yes | - |
| Version | Yes | Yes | Yes | Yes | - |
| Writeable | Yes | Yes | Yes | Yes | - |
Methods (Methoden):
| Item | Server 2003 | XP Pro | Windows 2000 | NT 4.0 | Windows 98 |
| BackupEventlog | Yes | Yes | Yes | Yes | - |
| ChangeSecurityPermissions | Yes | Yes | Yes | Yes | - |
| ChangeSecurityPermissionsEx | Yes | Yes | Yes | Yes | - |
| ClearEventlog | Yes | Yes | Yes | Yes | - |
| Compress | Yes | Yes | Yes | Yes | - |
| CompressEx | Yes | Yes | Yes | Yes | - |
| Copy | Yes | Yes | Yes | Yes | - |
| CopyEx | Yes | Yes | Yes | Yes | - |
| Delete | Yes | Yes | Yes | Yes | - |
| DeleteEx | Yes | Yes | Yes | Yes | - |
| GetEffectivePermission | Yes | Yes | Yes | Yes | - |
| Rename | Yes | Yes | Yes | Yes | - |
| TakeOwnerShip | Yes | Yes | Yes | Yes | - |
| TakeOwnerShipEx | Yes | Yes | Yes | Yes | - |
| Uncompress | Yes | Yes | Yes | Yes | - |
| UncompressEx | Yes | Yes | Yes | Yes | - |
Sample Code (Beispiel):
strComputer = "."
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set colItems = objWMIService.ExecQuery("Select * from Win32_NTEventLogFile")
For Each objItem in colItems
Wscript.Echo "Caption: " & objItem.Caption
Next