|
The purpose of the script is to look through the System Event Log. This
particular example will count how many EventCode entries there are for
Unexpected shutdowns.
Instructions
- Copy the entire script in the blue box below.
- Paste it into notepad.exe.
- File (menu), Save as Shutdown.vbs Note: Omitting the .vbs extension, this
is where people go wrong.
- Double click Shutdown.vbs
- Wait 30 seconds and check the Windows Scripting Host flashing in the
navigation area.
'VBScript
'Purpose of script to query System log for Unexpected
shutdowns
strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
Set colLoggedEvents = objWMIService.ExecQuery _
("Select * from Win32_NTLogEvent Where Logfile = 'System' and " _
& "EventCode = '6008'")
Wscript.Echo "Unexpected shutdowns: " & colLoggedEvents.Count
Learning points
- strComputer = "." set the script to query the current machine
- Set ObjWMIService tell the script to use WMI as opposed the ADSI.
- Here is the crucial line Logfile = 'System' and " _
& "EventCode = '6008'"
- Wscript.Echo calls for a message box to display the results.
More ideas
Check out the Event Viewer, System logs for other Event IDs that you want to
check. Alter the EventCode='6008') to your event number.
Finally, change the WScript.echo "Unexpected shutdowns: to what reflect
the error message.
| 
